r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 576.535555] loop7: detected capacity change from 0 to 40 18:54:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0xf59010000000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:54:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:54:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:54:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:54:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 576.648976] FAT-fs (loop2): bogus number of reserved sectors [ 576.649427] FAT-fs (loop2): Can't find a valid FAT filesystem 18:54:45 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:54:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:54:58 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:54:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:54:58 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:54:58 executing program 4: r0 = inotify_init() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:54:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:54:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:54:58 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 589.133502] FAT-fs (loop2): bogus number of reserved sectors [ 589.133935] FAT-fs (loop2): Can't find a valid FAT filesystem 18:54:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:54:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:54:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:54:58 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:54:58 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:54:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x3e83010000000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 589.325943] FAT-fs (loop2): bogus number of reserved sectors [ 589.326417] FAT-fs (loop2): Can't find a valid FAT filesystem 18:55:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x3f83010000000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:55:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:10 executing program 4: r0 = inotify_init() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:55:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:10 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:55:10 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:55:10 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 601.735906] FAT-fs (loop7): bogus number of reserved sectors [ 601.736494] FAT-fs (loop7): Can't find a valid FAT filesystem [ 601.737941] FAT-fs (loop2): bogus number of reserved sectors [ 601.738509] FAT-fs (loop2): Can't find a valid FAT filesystem 18:55:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:55:10 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 601.984861] FAT-fs (loop2): bogus number of reserved sectors [ 601.985955] FAT-fs (loop2): Can't find a valid FAT filesystem 18:55:10 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:55:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0xf500000000000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:55:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 602.040139] loop2: detected capacity change from 0 to 40 [ 602.043462] FAT-fs (loop2): bogus number of reserved sectors [ 602.044008] FAT-fs (loop2): Can't find a valid FAT filesystem [ 602.057009] FAT-fs (loop7): bogus number of reserved sectors [ 602.057583] FAT-fs (loop7): Can't find a valid FAT filesystem 18:55:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 602.193734] loop2: detected capacity change from 0 to 40 [ 602.198043] FAT-fs (loop2): bogus number of reserved sectors [ 602.198607] FAT-fs (loop2): Can't find a valid FAT filesystem 18:55:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:23 executing program 4: r0 = inotify_init() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:55:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffffff00000000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:55:23 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:23 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:23 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) [ 615.017669] FAT-fs (loop7): bogus number of reserved sectors [ 615.018216] FAT-fs (loop7): Can't find a valid FAT filesystem [ 615.022693] loop2: detected capacity change from 0 to 40 [ 615.024790] FAT-fs (loop2): bogus number of reserved sectors [ 615.025289] FAT-fs (loop2): Can't find a valid FAT filesystem 18:55:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x2, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 615.164951] loop2: detected capacity change from 0 to 40 [ 615.171290] FAT-fs (loop2): bogus number of reserved sectors [ 615.172025] FAT-fs (loop2): Can't find a valid FAT filesystem 18:55:24 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 615.192233] FAT-fs (loop7): bogus number of reserved sectors [ 615.193080] FAT-fs (loop7): Can't find a valid FAT filesystem 18:55:38 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 18:55:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x7, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:55:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:38 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:55:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:38 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:55:38 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 629.886199] FAT-fs (loop7): bogus number of reserved sectors [ 629.886720] FAT-fs (loop7): Can't find a valid FAT filesystem [ 629.901290] loop2: detected capacity change from 0 to 40 18:55:38 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 629.920948] FAT-fs (loop2): bogus number of reserved sectors [ 629.921853] FAT-fs (loop2): Can't find a valid FAT filesystem 18:55:38 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 18:55:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:55:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 630.143893] FAT-fs (loop7): bogus number of reserved sectors [ 630.144818] FAT-fs (loop7): Can't find a valid FAT filesystem 18:55:39 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 18:55:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x9, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 630.167540] loop2: detected capacity change from 0 to 40 [ 630.174927] FAT-fs (loop2): bogus number of reserved sectors [ 630.175641] FAT-fs (loop2): Can't find a valid FAT filesystem 18:55:39 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 630.305831] loop7: detected capacity change from 0 to 40 [ 630.323191] FAT-fs (loop7): bogus number of reserved sectors [ 630.323982] FAT-fs (loop7): Can't find a valid FAT filesystem 18:55:51 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:55:51 executing program 4: r0 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:55:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:55:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:51 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) [ 642.279439] loop7: detected capacity change from 0 to 40 [ 642.284033] FAT-fs (loop7): bogus number of reserved sectors [ 642.284516] FAT-fs (loop7): Can't find a valid FAT filesystem 18:55:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xb, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 642.310686] loop2: detected capacity change from 0 to 40 [ 642.326395] FAT-fs (loop2): bogus number of reserved sectors [ 642.327255] FAT-fs (loop2): Can't find a valid FAT filesystem 18:55:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:55:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 642.367806] loop7: detected capacity change from 0 to 40 [ 642.372627] FAT-fs (loop7): bogus number of reserved sectors [ 642.373009] FAT-fs (loop7): Can't find a valid FAT filesystem 18:55:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:55:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xf5, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 642.451390] loop7: detected capacity change from 0 to 40 [ 642.457578] FAT-fs (loop7): bogus number of reserved sectors [ 642.458002] FAT-fs (loop7): Can't find a valid FAT filesystem [ 642.499290] loop2: detected capacity change from 0 to 40 [ 642.513242] FAT-fs (loop2): bogus number of reserved sectors [ 642.514026] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:06 executing program 4: r0 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:56:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x700, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:06 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:56:06 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:56:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 657.405187] loop2: detected capacity change from 0 to 40 [ 657.419784] FAT-fs (loop2): bogus number of reserved sectors [ 657.420181] FAT-fs (loop2): Can't find a valid FAT filesystem [ 657.421873] loop7: detected capacity change from 0 to 40 [ 657.488519] FAT-fs (loop7): bogus number of reserved sectors [ 657.489303] FAT-fs (loop7): Can't find a valid FAT filesystem 18:56:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x900, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 657.570630] loop2: detected capacity change from 0 to 40 [ 657.573686] FAT-fs (loop2): bogus number of reserved sectors 18:56:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 657.574209] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xa00, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:06 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 657.656101] loop7: detected capacity change from 0 to 40 [ 657.664902] FAT-fs (loop7): bogus number of reserved sectors [ 657.665328] FAT-fs (loop7): Can't find a valid FAT filesystem [ 657.695213] loop2: detected capacity change from 0 to 40 [ 657.713735] FAT-fs (loop2): bogus number of reserved sectors [ 657.714133] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 18:56:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 670.197254] loop7: detected capacity change from 0 to 40 18:56:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:19 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:56:19 executing program 4: r0 = inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:56:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 670.210469] loop2: detected capacity change from 0 to 40 18:56:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xb00, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 670.217418] FAT-fs (loop2): bogus number of reserved sectors [ 670.218216] FAT-fs (loop2): Can't find a valid FAT filesystem [ 670.237485] FAT-fs (loop7): bogus number of reserved sectors [ 670.237882] FAT-fs (loop7): Can't find a valid FAT filesystem 18:56:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 18:56:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x1020, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 670.349578] loop7: detected capacity change from 0 to 40 [ 670.357562] FAT-fs (loop7): bogus number of reserved sectors [ 670.358294] FAT-fs (loop7): Can't find a valid FAT filesystem 18:56:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) [ 670.408316] loop2: detected capacity change from 0 to 40 [ 670.418491] FAT-fs (loop2): invalid media value (0x00) [ 670.419174] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 18:56:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x2000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 670.550221] loop2: detected capacity change from 0 to 40 [ 670.557221] FAT-fs (loop2): invalid media value (0x00) [ 670.558453] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:33 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:56:33 executing program 4: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:56:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x2010, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:33 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 18:56:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 684.726468] loop7: detected capacity change from 0 to 40 [ 684.739427] loop2: detected capacity change from 0 to 40 [ 684.745650] FAT-fs (loop7): bogus number of reserved sectors [ 684.746187] FAT-fs (loop7): Can't find a valid FAT filesystem [ 684.748180] FAT-fs (loop2): invalid media value (0x00) [ 684.749102] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xedc0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:33 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 684.897948] loop2: detected capacity change from 0 to 40 18:56:33 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) [ 684.901015] loop7: detected capacity change from 0 to 40 [ 684.906384] FAT-fs (loop7): bogus number of reserved sectors [ 684.907161] FAT-fs (loop7): Can't find a valid FAT filesystem [ 684.911654] FAT-fs (loop2): invalid media value (0x00) [ 684.912101] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xf500, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:33 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 685.025855] loop7: detected capacity change from 0 to 40 [ 685.034090] FAT-fs (loop7): bogus number of reserved sectors [ 685.034604] FAT-fs (loop7): Can't find a valid FAT filesystem [ 685.035770] loop2: detected capacity change from 0 to 40 [ 685.042658] FAT-fs (loop2): invalid media value (0x00) [ 685.043081] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 685.142092] loop2: detected capacity change from 0 to 40 [ 685.147321] FAT-fs (loop2): invalid media value (0x00) [ 685.147768] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:46 executing program 4: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:56:46 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) [ 697.696685] loop7: detected capacity change from 0 to 40 18:56:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:46 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x1590e, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 697.714801] FAT-fs (loop7): invalid media value (0x00) [ 697.715183] FAT-fs (loop7): Can't find a valid FAT filesystem 18:56:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 697.782684] loop2: detected capacity change from 0 to 40 [ 697.788706] loop7: detected capacity change from 0 to 40 [ 697.795768] FAT-fs (loop2): bogus number of FAT sectors [ 697.796139] FAT-fs (loop2): Can't find a valid FAT filesystem 18:56:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x1590f, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 697.812156] FAT-fs (loop7): invalid media value (0x00) [ 697.812659] FAT-fs (loop7): Can't find a valid FAT filesystem 18:56:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 697.883908] loop7: detected capacity change from 0 to 40 [ 697.887073] FAT-fs (loop7): invalid media value (0x00) [ 697.887465] FAT-fs (loop7): Can't find a valid FAT filesystem 18:56:46 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:56:59 executing program 4: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:56:59 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x1833e, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:56:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:56:59 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:56:59 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:56:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 710.942647] loop2: detected capacity change from 0 to 40 [ 710.946159] FAT-fs (loop2): bogus number of FAT sectors [ 710.946585] FAT-fs (loop2): Can't find a valid FAT filesystem [ 710.949499] loop7: detected capacity change from 0 to 40 [ 710.956269] FAT-fs (loop7): invalid media value (0x00) [ 710.956750] FAT-fs (loop7): Can't find a valid FAT filesystem 18:56:59 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:56:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x1833f, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 711.103876] loop7: detected capacity change from 0 to 40 18:57:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 711.122946] FAT-fs (loop7): invalid media value (0x00) [ 711.123695] FAT-fs (loop7): Can't find a valid FAT filesystem [ 711.127532] loop2: detected capacity change from 0 to 40 [ 711.136968] FAT-fs (loop2): bogus number of FAT sectors [ 711.137709] FAT-fs (loop2): Can't find a valid FAT filesystem 18:57:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x80000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 711.292860] loop7: detected capacity change from 0 to 40 [ 711.296825] loop2: detected capacity change from 0 to 40 [ 711.297743] FAT-fs (loop7): invalid media value (0x00) [ 711.298455] FAT-fs (loop7): Can't find a valid FAT filesystem [ 711.323627] syz-executor.2: attempt to access beyond end of device [ 711.323627] loop2: rw=2049, sector=92, nr_sectors = 4 limit=40 18:57:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:57:12 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:57:12 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:57:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:57:12 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:57:12 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) [ 723.781038] loop2: detected capacity change from 0 to 40 [ 723.790738] loop7: detected capacity change from 0 to 40 [ 723.799325] FAT-fs (loop7): bogus number of FAT sectors [ 723.800074] FAT-fs (loop7): Can't find a valid FAT filesystem 18:57:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:57:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 723.982599] loop7: detected capacity change from 0 to 40 [ 723.987692] loop2: detected capacity change from 0 to 40 [ 724.002756] FAT-fs (loop7): bogus number of FAT sectors [ 724.003497] FAT-fs (loop7): Can't find a valid FAT filesystem 18:57:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x7000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:57:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 724.170664] loop7: detected capacity change from 0 to 40 [ 724.178557] FAT-fs (loop7): bogus number of FAT sectors [ 724.179271] FAT-fs (loop7): Can't find a valid FAT filesystem [ 724.185043] loop2: detected capacity change from 0 to 40 18:57:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x8000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:57:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 724.353524] loop2: detected capacity change from 0 to 40 [ 736.485517] loop3: detected capacity change from 0 to 40 [ 736.494154] syz-executor.3: attempt to access beyond end of device [ 736.494154] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 18:57:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:25 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) 18:57:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:25 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:57:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:57:25 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:57:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x9000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:57:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 736.541752] loop7: detected capacity change from 0 to 40 [ 736.550529] loop2: detected capacity change from 0 to 40 18:57:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 736.568772] syz-executor.7: attempt to access beyond end of device [ 736.568772] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40 18:57:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 736.609638] loop3: detected capacity change from 0 to 40 18:57:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xa000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:57:25 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) [ 736.635221] syz-executor.3: attempt to access beyond end of device [ 736.635221] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 18:57:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:25 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 736.715975] loop3: detected capacity change from 0 to 40 [ 736.726010] loop7: detected capacity change from 0 to 40 [ 736.735415] syz-executor.3: attempt to access beyond end of device [ 736.735415] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 736.754302] loop2: detected capacity change from 0 to 40 18:57:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 736.828299] loop3: detected capacity change from 0 to 40 18:57:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:38 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:57:38 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(r0, 0x0, 0x0) [ 749.411556] loop2: detected capacity change from 0 to 40 18:57:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xb000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:57:38 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:57:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:57:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 749.435570] loop3: detected capacity change from 0 to 40 [ 749.450161] loop7: detected capacity change from 0 to 40 18:57:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:38 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:57:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xe590100, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 749.526653] loop2: detected capacity change from 0 to 40 18:57:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 749.561187] loop3: detected capacity change from 0 to 40 [ 749.563261] loop7: detected capacity change from 0 to 40 18:57:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xf590100, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:57:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:57:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 749.649362] loop3: detected capacity change from 0 to 40 [ 749.660968] loop7: detected capacity change from 0 to 40 18:58:00 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:58:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:58:00 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) read(r0, 0x0, 0x0) 18:58:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:58:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x10000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 771.179733] loop7: detected capacity change from 0 to 40 [ 771.182052] loop3: detected capacity change from 0 to 40 [ 771.183992] loop2: detected capacity change from 0 to 40 18:58:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x20000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 771.369494] loop7: detected capacity change from 0 to 40 [ 771.385568] loop2: detected capacity change from 0 to 40 [ 771.391703] loop3: detected capacity change from 0 to 40 18:58:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:58:11 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) read(r0, 0x0, 0x0) 18:58:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x20100000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:11 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:11 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:58:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 782.621996] loop2: detected capacity change from 0 to 40 [ 782.645591] loop7: detected capacity change from 0 to 40 18:58:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x3e830100, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:58:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 782.707997] loop2: detected capacity change from 0 to 40 18:58:11 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:11 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:58:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 782.785534] loop7: detected capacity change from 0 to 40 [ 782.802854] loop2: detected capacity change from 0 to 40 18:58:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x3f830100, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:24 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) read(r0, 0x0, 0x0) 18:58:24 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:58:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:58:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x8cffffff, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:24 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 18:58:24 executing program 3: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 795.189758] loop2: detected capacity change from 0 to 40 18:58:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) 18:58:24 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) [ 795.290232] loop7: detected capacity change from 0 to 40 18:58:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xc0ed0000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:58:24 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 795.332549] loop2: detected capacity change from 0 to 40 18:58:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xf5000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) [ 795.379203] loop3: detected capacity change from 0 to 40 [ 795.414160] loop7: detected capacity change from 0 to 40 [ 795.429758] loop2: detected capacity change from 0 to 40 18:58:36 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 18:58:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:58:36 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:58:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:58:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) 18:58:36 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xf6ffffff, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 807.103413] loop7: detected capacity change from 0 to 40 18:58:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xffffff8c, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 807.164245] loop2: detected capacity change from 0 to 40 [ 807.172049] loop3: detected capacity change from 0 to 40 18:58:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xfffffff6, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 807.186527] loop7: detected capacity change from 0 to 40 18:58:36 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xedc000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:36 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 807.333637] loop3: detected capacity change from 0 to 40 18:58:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:58:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 819.615281] loop7: detected capacity change from 0 to 40 [ 819.617419] loop3: detected capacity change from 0 to 40 18:58:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) 18:58:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x8000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:48 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:48 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) read(r0, 0x0, 0x0) [ 819.648153] loop2: detected capacity change from 0 to 40 [ 819.648285] loop6: detected capacity change from 0 to 40 18:58:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:58:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x100000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:58:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:58:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) 18:58:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 819.810860] loop3: detected capacity change from 0 to 40 [ 819.816081] loop7: detected capacity change from 0 to 40 [ 819.891089] loop2: detected capacity change from 0 to 40 18:58:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:58:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x200000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 820.007954] loop3: detected capacity change from 0 to 40 18:59:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:59:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) 18:59:01 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 18:59:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) 18:59:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:59:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x700000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 18:59:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 832.589004] loop2: detected capacity change from 0 to 40 [ 832.633243] loop7: detected capacity change from 0 to 40 18:59:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) 18:59:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 832.665878] loop2: detected capacity change from 0 to 40 18:59:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 18:59:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:59:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) 18:59:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x800000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) [ 832.738996] loop2: detected capacity change from 0 to 40 18:59:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 832.823280] loop7: detected capacity change from 0 to 40 18:59:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) 18:59:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:59:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:59:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:59:15 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(0xffffffffffffffff, 0x0, 0x0) [ 846.949235] loop2: detected capacity change from 0 to 40 18:59:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 18:59:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x900000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) [ 846.958430] loop7: detected capacity change from 0 to 40 18:59:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xa00000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) 18:59:16 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 18:59:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) 18:59:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:59:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 847.081307] loop2: detected capacity change from 0 to 40 18:59:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:59:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xb00000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) [ 847.151102] loop7: detected capacity change from 0 to 40 [ 847.170958] FAT-fs (loop3): bogus number of reserved sectors [ 847.171763] FAT-fs (loop3): Can't find a valid FAT filesystem [ 847.177599] loop2: detected capacity change from 0 to 40 18:59:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:59:27 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:59:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) 18:59:27 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) read(0xffffffffffffffff, 0x0, 0x0) [ 858.586668] loop2: detected capacity change from 0 to 40 18:59:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xe59010000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:27 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:59:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) 18:59:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 858.609098] loop7: detected capacity change from 0 to 40 18:59:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xf59010000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 858.623539] FAT-fs (loop3): bogus number of reserved sectors [ 858.623955] FAT-fs (loop3): Can't find a valid FAT filesystem 18:59:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) 18:59:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) 18:59:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) 18:59:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:59:27 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 858.727169] loop2: detected capacity change from 0 to 40 [ 858.733142] loop7: detected capacity change from 0 to 40 18:59:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x1000000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 858.771186] FAT-fs (loop3): bogus number of reserved sectors [ 858.771656] FAT-fs (loop3): Can't find a valid FAT filesystem [ 858.772772] loop4: detected capacity change from 0 to 40 18:59:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) [ 858.847838] loop7: detected capacity change from 0 to 40 18:59:40 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:59:40 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:59:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) 18:59:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) 18:59:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x2000000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:59:40 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:59:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 871.991384] loop7: detected capacity change from 0 to 40 [ 872.013564] loop2: detected capacity change from 0 to 40 [ 872.044739] FAT-fs (loop3): bogus number of reserved sectors [ 872.045713] FAT-fs (loop3): Can't find a valid FAT filesystem 18:59:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x2010000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) 18:59:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) 18:59:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 872.206585] loop7: detected capacity change from 0 to 40 [ 872.231680] loop2: detected capacity change from 0 to 40 18:59:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x3e83010000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 872.290015] FAT-fs (loop3): bogus number of reserved sectors [ 872.290853] FAT-fs (loop3): Can't find a valid FAT filesystem 18:59:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 18:59:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:56 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:59:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) 18:59:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:59:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x3f83010000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:57 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 888.043110] loop7: detected capacity change from 0 to 40 [ 888.084557] FAT-fs (loop3): bogus number of reserved sectors [ 888.085286] FAT-fs (loop3): Can't find a valid FAT filesystem 18:59:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) 18:59:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x8cffffff00000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:59:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 888.223186] loop7: detected capacity change from 0 to 40 18:59:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 18:59:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 18:59:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) 18:59:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xf500000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 888.353141] loop3: detected capacity change from 0 to 40 [ 888.359388] FAT-fs (loop3): bogus number of reserved sectors [ 888.360076] FAT-fs (loop3): Can't find a valid FAT filesystem [ 888.373631] loop7: detected capacity change from 0 to 40 19:00:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) 19:00:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xf6ffffff00000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:00:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:00:08 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:00:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:08 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:08 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 900.016013] loop7: detected capacity change from 0 to 40 [ 900.073125] loop3: detected capacity change from 0 to 40 19:00:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) [ 900.093490] FAT-fs (loop3): bogus number of reserved sectors [ 900.094567] FAT-fs (loop3): Can't find a valid FAT filesystem 19:00:09 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0xffffffff00000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 900.125013] loop7: detected capacity change from 0 to 40 19:00:09 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) [ 900.215457] loop7: detected capacity change from 0 to 40 19:00:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:09 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 19:00:09 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 19:00:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 900.309105] loop3: detected capacity change from 0 to 40 [ 900.312842] FAT-fs (loop3): bogus number of reserved sectors [ 900.313456] FAT-fs (loop3): Can't find a valid FAT filesystem [ 900.361554] 9pnet_fd: Insufficient options for proto=fd [ 900.365505] 9pnet_fd: Insufficient options for proto=fd 19:00:09 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 19:00:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:00:22 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) [ 913.183715] loop7: detected capacity change from 0 to 40 19:00:22 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:22 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 19:00:22 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) 19:00:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:00:22 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) [ 913.235826] loop3: detected capacity change from 0 to 40 [ 913.246730] 9pnet_fd: Insufficient options for proto=fd [ 913.252367] FAT-fs (loop3): bogus number of reserved sectors [ 913.253166] FAT-fs (loop3): Can't find a valid FAT filesystem [ 913.255689] 9pnet_fd: Insufficient options for proto=fd 19:00:22 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:00:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r0}}) [ 913.341729] syz-executor.7: attempt to access beyond end of device [ 913.341729] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40 19:00:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:00:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:22 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:22 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 913.445779] 9pnet_fd: Insufficient options for proto=fd [ 913.450038] 9pnet_fd: Insufficient options for proto=fd 19:00:22 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 913.473600] loop3: detected capacity change from 0 to 40 19:00:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 913.489589] FAT-fs (loop3): bogus number of reserved sectors [ 913.490404] FAT-fs (loop3): Can't find a valid FAT filesystem 19:00:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r0}}) 19:00:22 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 913.568533] 9pnet_fd: Insufficient options for proto=fd [ 913.572359] 9pnet_fd: Insufficient options for proto=fd [ 925.735075] loop3: detected capacity change from 0 to 40 19:00:34 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:34 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r0}}) 19:00:34 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:00:34 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:34 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 925.740035] FAT-fs (loop3): bogus number of reserved sectors [ 925.740440] FAT-fs (loop3): Can't find a valid FAT filesystem 19:00:34 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 925.814514] 9pnet_fd: Insufficient options for proto=fd [ 925.821610] 9pnet_fd: Insufficient options for proto=fd 19:00:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 925.865764] loop3: detected capacity change from 0 to 40 19:00:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x22}) [ 925.876545] FAT-fs (loop3): bogus number of reserved sectors [ 925.876919] FAT-fs (loop3): Can't find a valid FAT filesystem 19:00:34 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:34 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 925.972149] loop3: detected capacity change from 0 to 40 [ 925.983044] 9pnet_fd: Insufficient options for proto=fd [ 925.984093] FAT-fs (loop3): bogus number of reserved sectors [ 925.984625] FAT-fs (loop3): Can't find a valid FAT filesystem 19:00:34 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) [ 925.994200] 9pnet_fd: Insufficient options for proto=fd 19:00:35 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) 19:00:48 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:00:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:00:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:00:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:00:48 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:48 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:48 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) [ 939.082623] loop3: detected capacity change from 0 to 40 [ 939.096239] FAT-fs (loop3): bogus number of reserved sectors [ 939.096684] FAT-fs (loop3): Can't find a valid FAT filesystem 19:00:48 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:48 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:48 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 19:00:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:00:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x2}}) [ 939.276397] loop3: detected capacity change from 0 to 40 19:00:48 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) [ 939.284636] FAT-fs (loop3): bogus number of reserved sectors [ 939.285068] FAT-fs (loop3): Can't find a valid FAT filesystem 19:00:48 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:00:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x7}}) 19:00:48 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:00:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 939.414324] loop3: detected capacity change from 0 to 40 19:00:48 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) [ 939.435400] FAT-fs (loop3): bogus number of reserved sectors [ 939.436187] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:00 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 19:01:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:01:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:01:00 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 19:01:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x8}}) 19:01:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:01:00 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 19:01:00 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 951.955074] loop3: detected capacity change from 0 to 40 [ 951.958454] FAT-fs (loop3): bogus number of reserved sectors [ 951.959155] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x9}}) 19:01:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0xa}}) 19:01:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0xb}}) 19:01:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:01:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x10}}) 19:01:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0xf5}}) 19:01:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1, 0xd}) 19:01:13 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:01:13 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 19:01:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:01:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:01:13 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 964.141881] loop3: detected capacity change from 0 to 40 [ 964.145747] FAT-fs (loop3): invalid media value (0x00) [ 964.146106] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:13 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 964.195177] 9pnet_fd: Insufficient options for proto=fd 19:01:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 964.242094] 9pnet_fd: Insufficient options for proto=fd 19:01:13 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="247666646eda3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 964.627299] 9pnet_fd: Insufficient options for proto=fd [ 964.628972] 9pnet_fd: Insufficient options for proto=fd [ 964.655322] loop3: detected capacity change from 0 to 40 [ 964.656819] FAT-fs (loop3): invalid media value (0x00) [ 964.657193] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:13 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:01:13 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="746f3d008000"/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 19:01:13 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:14 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:01:14 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500), 0x8) sendfile(r0, r1, 0x0, 0x2) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000001c0)="eb6eb15b40e51fd4bd532fccb137839069405b192402a4518f17e642af90e7532cf8a67ac53af96d886fe07d63f715acb9d0fea6079430b1263043029daf6f0c228ef2bba00dbe8630d946ffd5c4cd8c5cf787c0c9", 0x55}, {&(0x7f0000000080)="3d2311a61ce727e500f51731e2f0aa2000d3b6467090ec96a5456cc099f64123c2a0dfa5271977c8", 0x28}, {&(0x7f0000000240)="5e4fbc0b4ac25d95d49d8cd7de575b61a6a4a2672dcb86c66d7904108845d6848dcc3882a99db3bd73d2ef6a9aed4a73b2f67786e330cf0dd236f0f03be27bccb29284187132dcbaf4289ca604166ba3c61b5738cbcf47070d6ada", 0x5b}, {&(0x7f00000002c0)="23c36970d78566be4920e6ce083db1c8bd8133d22b7fece1527969d4d6f7a531b51389c0c8ea2837026ce193518b349c4a1d1be42a47d93a828ae631b160d074b495b4e799", 0x45}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000340)="f07ce988c4ab92973f009e811e71e5f0f562fef604b50c9715b4c2a5af3a2c547bf32d7b1e8b68e05f11d2cc6cb55705af4dac4c47dbfd720a815199292ff86fde1a7730002f032d39e868dcc1f03f3a84249e5f7c713a5260d5799634197ddd005ce3c7bed4cc33a84dba3ca142acbbc0b99cd40c7c050432ea18e8cc60398314bf24c38aeeb00b82bc757e8b8a56e9c97e57cff78398fcde7f08288d119bd4a39acea7ec1283e9d993d7b35f3f2f56ce8bcbfb6cd572d035e1e336326eb062ccb5c0be9286c114fac1506015b2af", 0xcf}, {&(0x7f0000000440)="ac1f63", 0x3}], 0x7, 0xd) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x4fa8, 0x0, 0x0, 0x2408, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r5, r6, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) [ 976.802002] loop3: detected capacity change from 0 to 40 [ 976.817705] FAT-fs (loop3): invalid media value (0x00) [ 976.818180] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:25 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xb, 0x1e, 0x37, 0xa1, 0x0, 0x4, 0x5100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040)}, 0x18048, 0x6e7, 0x6, 0x3, 0x4, 0x80000000, 0xe3, 0x0, 0x400, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 19:01:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:01:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:25 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:25 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:25 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:25 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500), 0x8) sendfile(r0, r1, 0x0, 0x2) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000001c0)="eb6eb15b40e51fd4bd532fccb137839069405b192402a4518f17e642af90e7532cf8a67ac53af96d886fe07d63f715acb9d0fea6079430b1263043029daf6f0c228ef2bba00dbe8630d946ffd5c4cd8c5cf787c0c9", 0x55}, {&(0x7f0000000080)="3d2311a61ce727e500f51731e2f0aa2000d3b6467090ec96a5456cc099f64123c2a0dfa5271977c8", 0x28}, {&(0x7f0000000240)="5e4fbc0b4ac25d95d49d8cd7de575b61a6a4a2672dcb86c66d7904108845d6848dcc3882a99db3bd73d2ef6a9aed4a73b2f67786e330cf0dd236f0f03be27bccb29284187132dcbaf4289ca604166ba3c61b5738cbcf47070d6ada", 0x5b}, {&(0x7f00000002c0)="23c36970d78566be4920e6ce083db1c8bd8133d22b7fece1527969d4d6f7a531b51389c0c8ea2837026ce193518b349c4a1d1be42a47d93a828ae631b160d074b495b4e799", 0x45}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000340)="f07ce988c4ab92973f009e811e71e5f0f562fef604b50c9715b4c2a5af3a2c547bf32d7b1e8b68e05f11d2cc6cb55705af4dac4c47dbfd720a815199292ff86fde1a7730002f032d39e868dcc1f03f3a84249e5f7c713a5260d5799634197ddd005ce3c7bed4cc33a84dba3ca142acbbc0b99cd40c7c050432ea18e8cc60398314bf24c38aeeb00b82bc757e8b8a56e9c97e57cff78398fcde7f08288d119bd4a39acea7ec1283e9d993d7b35f3f2f56ce8bcbfb6cd572d035e1e336326eb062ccb5c0be9286c114fac1506015b2af", 0xcf}, {&(0x7f0000000440)="ac1f63", 0x3}], 0x7, 0xd) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x4fa8, 0x0, 0x0, 0x2408, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r5, r6, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 19:01:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:01:25 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500), 0x8) sendfile(r0, r1, 0x0, 0x2) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000001c0)="eb6eb15b40e51fd4bd532fccb137839069405b192402a4518f17e642af90e7532cf8a67ac53af96d886fe07d63f715acb9d0fea6079430b1263043029daf6f0c228ef2bba00dbe8630d946ffd5c4cd8c5cf787c0c9", 0x55}, {&(0x7f0000000080)="3d2311a61ce727e500f51731e2f0aa2000d3b6467090ec96a5456cc099f64123c2a0dfa5271977c8", 0x28}, {&(0x7f0000000240)="5e4fbc0b4ac25d95d49d8cd7de575b61a6a4a2672dcb86c66d7904108845d6848dcc3882a99db3bd73d2ef6a9aed4a73b2f67786e330cf0dd236f0f03be27bccb29284187132dcbaf4289ca604166ba3c61b5738cbcf47070d6ada", 0x5b}, {&(0x7f00000002c0)="23c36970d78566be4920e6ce083db1c8bd8133d22b7fece1527969d4d6f7a531b51389c0c8ea2837026ce193518b349c4a1d1be42a47d93a828ae631b160d074b495b4e799", 0x45}, {&(0x7f0000000c40)="6b3f3fd6e86ca901c7016451c4aef14df7380799da44fa70a18f2336d0ae2f4242ed48eeb88ace91986971c71e65f64b0fb640e22e60723f630c79f361f9fceaba8d1beb3a5fae420577de35a3bcd88437f0cc9be3ae74f2f9da1bc2af63141163e5509186dbff2455d70f2c230e176edd385d7ed96f9e22569e5af717761f7ade962289c0833baeda7807df7c5f369284b7dce4b626d39422ae8fae398ea7ddbf516f3e992fb2fe667313123060d7c4dd7286b0819d7eb6464f8e674e05977f3d7206dbb2ae7c7bd4734d6618b76d745e4ede276a5d2977e2367191345f2c21146e16cd2d86f1e69deb4c1a8e9e9ae82e5bcb836bfb2edf75876589b78d5b3a459b6b7306741329603e924dc0216430ac6289b265ad75d67621f335b04afd4c31fee4b811745b7b50855bce8f349eea5db5041d070d763c43f4a956e7f2234a7bdb687765bec9b29a7d307b97b38814d1fc3cacd38d8ca6e9803d192f10454865b554c4b1906744f19fe2aff2618a44556583000193fe8d1711781ceaa93ef0b5dd0d214c66cb96aa1767bee33fb3428b85b209b1a68331c50c5af78a9d600948ca276cd04dcb1800e34886ef5c5147bd657889b66102b75ac4c2d01d7a223559b20f13885ff4da17edf330cf7bd11d46aaec0aec3af45300624085e8c2542131d221cd91044a74eb952de9171890fb2ee6a406bd69696db3507ed133ffd176a3228367296f1299833ca2bcc1825da341520546782fb936ecc9ae69d227e0ae50933092f017763257aaf41fb49c2b4fc59bd3bab0b7a6108fda4523b9b86ca1573f4855a93caac0595ed8d39dc12ca5d4620c19d836327d474e64c905572af45411d324187c8e53a74dd101c8205e3c806c4e2f09ab0009d314d6b35e22a4cd329d543c8ad02596f788d99682e0f54ea6f5c03b81bea52fa2230bc9b8e02a6dcfa771ec695fe889a9a441feb4622197fa15650a1b453fc5f31ca5f8e9036eb52d0ef7ff64b686588f69f0e5de34e8006db731e98326824b7872e40ba6eef5afb36834ad8e28e9cecb0741bde51f55d8d80db6d8f365996d237b436777bef5504c9e253d357067cfe1c662ae310bc4afe92ad30504a82658e911a4f1c258029a15472eb7f5f5aa8eaa3a2fc720409b3efd2ebb9aef198e5969c93b287fe0be40bddc690040a29d43fcdbf5d4c253a09afc22c2b451d81c1f48bfe78f61f9fb724040d5138eec5f93bcd99c25eb6a87d756dec338d28e5205759b83824bc56d903b64255fa46426518f2fe265e8fc0d018236bb5c4a000d688ba0dec089a62b70290e6d25fa4b7040acd29fa27c40f5fc6a0b534479f605d209e6be700ff9ab864c4fda169b83893065d5cb98597448c31ab10ef89262449d6a0886db8f1d249ddd7ad97d4f4fbd2c62e030c84b5a3181356572e5531259aedb26ffcc5a45299da2007a8725bf7d9a506b0132c4c906b3b5c527db9e3828c194a3977f2953401e61f83e5b65f9823e45dd42736d9375494502521af2e948aaf0eabf18897561cd111ffc4d9f3a8d7aee97b253400fdcec2762e3266aaa1051947bad28d394ca44bd808aec2463729f5ceb7ba912bf9d3dc446874d4248224c5c6a436f4ccb19d86b8670b44f48c1aab06abb371f7615332b0e1fd6174a75b52cd4539c1d549e6440cb8c6598f4c067c763747c81b64c00d33628465c2cc9b88e119ca5faa735490d3d306cc1084aad1fdbe786916d362bf39a7ee3c19c8c5d453b882abbfe427b616fed98c9b7f93b25439e08bc846bcb939db65a3bf47e5f506da9e8a876c70028a652dc443c9b03531c25b42e7cdc23b3080b95cc658470b6f663eb36327e33c1adc48c922490b72b848975b41253add592e1c282e744fbb12ae8e962624329b279afe142dbb714b232a8a537de4e3adbc7f7efb239a7b0f531fe2a12365f288b4ca01997d279f218f62ade339843b36f90858f944abc5bb000dc3e02145ab385f2fd7c42edd6cd868c3164afe80a160727215fcddea22a73eb923a18ddb7d30f940f5f79b48e729121a816efbeef9a87037fdd3db4140926aff2d6767d288d40a84ab632bcc085922b36870f817f8b27d17602fa130dbf49a25e334cfffd719019fa2248e8ed1c8d28a07027c8ffc4b11ccb3898d62084dc030428afe7f595da01c3b0a6ac342b32ef1025299d72320c7cebcbd24a0ea5e9118d34aeda0328728d1fa6195696ea46828fbd607ff699e4cfa656eed6c2fbc0b1601992d8b03128ae0f31113f14a6dbe1f3334393e4788e245e02f39b8a933ab2fe03ea607cf13a554e1caf2fd3f81cf664c3f318e915edb2283e51bf930d95af76533274b6a5acadebeb8816890238f37349d1775da0b5d70cf0658b98c6b746a4bbd911b51b350374c1995b5890c2263fd34af4cade35f2bb790a8a0622ed3e497cabba02ad1b11efa341af5370f4a258059613baedd3c8f68dfe55081cefd59a8252285aea129885c54bbbbebe2904da7daa62322980aff0116dbd9e19f0e1c4bec5c52d408f3d81632c593de7e7508085defce7c9cc024720dd6f64c33cce940acc5fe7806f3de8acd41df82e81d1981fa2e405f7c3f171e142a5b4db25ceac4bbba2fa5708d2676f0ee811e73e5eba1c9efea443cfde094a26909e641484ca9ba90b940d1ee101a33f8f9fddaf60662d80c68430f945eb1b8133a089ee80e29bf5714babc2b23fba63e277bf921f242b6586218b378d6f6ed3cc123a2d20dcd6ac14a10f1964b94fcc1d9f4af860ebdc9a284b90e22cf227fa410c4ec2c150510aaa1d552bd50b524b847c1e19171d7d14ef6d723ea1a083eefe0a0471d1e05a19f1c63fe0d145387ad4228fa921394a6a5d3f611234f853a4ede632aabc3ff35a613542bd8f0f69c6fb2f303a99f7b47cb560b4430f1bbf1841626396da27f6030789287117b87add9df4f6ef7355a38c4bea0f52e53fe2c0e2dc42d0df04e41e9f569611be13b9ca30c24104c63fd313bb67ac74d30aff452e6cedeb4286690494947e44938faff75bbbd15325aaf4391c3da18909add4ee4d3488ef3d94140783eff7be18eb0471181ee60b7e3d421bec0a307a68082d9125dd3770f338b70415b84a3a47bf81ade773ed1b20532069908d30347867aceb57b0dafcf763d53d171985e63149a157cd3929452784446af4bf0b0853145d12df9112cd906b50f1ca94191f2a8c289a770042f8e51ab1d277917c17edc2abc4129bdad54edd135b2078746486f692affc7ea858e99089e7243f6a35790819f4cd1e1d6f8416a36e7f627bc632b25d6e6bb15705efdfbd0abdf45df068a4b7cfe6bae4cb89f5a8cce636fda7d8ab8a9d7ea00647ab5cae4751c9d64602cf81766849b222c984059941fbf7eaf53736598216543e6bc86565eb5d61818cb46c1f5b1ef89fe82f7753209cadde71b681f1e77bb659875d37f90d7bb3e82ffa2daa25f443b5b7c9f9e416431302e1d71716a20d1b962a0fd7b6a85987284392e5124c4b8871e6bcfd2bfd9dac11351ca73c8a34603a6324e39cc14713cbd14ccbd5f75728a927c27ab5b69f82bd470e783f899e2431f2bbd0d61356cba78f985ff5acb12e63d4bbc6c67387aae1d03c8ec8635d943ac02a783ba7b05ba157aef1d3bb4b416aa93b9a34057a6a4040cc539d70eb38358d012b92dcf2a01d66b6a15b79702328e54af9afd1fdd42e36a11f8bf275640605d360050b4849329f2b507883b14ac3869eb70f7c938765556c967ca699844c1a7d01bafaf53f0606b54f77bbe6ad2f6662cb6def14cf783a06910914520e6bf58cbcc23e2fee931d537664cd294c955e6c7cd64fa38d71fce8c45e6c67f809f58bddb44cc2b7e60de11d468290f85e1d94146b4b279e1bb7f38940cd1d9fad1bdbf519699e27b6be090af47012239ecf772c678cb9052bb6d6bee3f4de62a6e76add66c0e719eac675a09e1dc10e176aaabfe68e5d9012661145466899cd4eb7f5245754a3bc23497d27e5793d5a8b9d96678f542d968deaf905be0ce59068eeeda58ef31082be549ede322f82b9c9a0ddf2f626f611caa98f50185cbc680842971c71404e14c2f1e1653226cc4bb2e4192f807e80acd02831da4df72c0a34531086dc4fe6c8006d6f60639bc4080863bdec811c76bc72b96323bb2913eb9c0e246d89614c05371df1d577c4f91e97619d58a3f93cd6c63ea8f1f404d470f8f20cb3cda026e98f417e5f2ca71f89c18efa251eb043adad1e443ba05cd7ce642682faffc8aca82acf2413e45fc6bd87dd922e16b6167c986c40fbf170276cabfc067039e33fa23426e480e3d737931a70e04ff4a9d4eafbc2dd8b42ab39573927416168401686d4a44c239292f00bb40bb42122f500b5f23ff0b9b11ada77bdb0813329d767f868dab6cffd16348eb72a68a35c2e75cdcacdcddd68d154b4ab8470b3064cf19da1620984fcc98a1f3dc3095e90f9ea2fe5fe7faac890bb070bdd5c54d631d921047e190496983896b36fee448b56b92709cdc10dd04fd4f9960a8e4fc973bd9322285abe9c2c4d3bd1e708d33f86367b3bd83d7cc7ed28ff236bc1a363ec426e76f28f2075a64f97f796aa1c2f61278b3ffbd7fb06c62c6ca43f90b41f14f049b3626dbcf7860a0634c6f2efe9149725e330602e27366d31b31499556d45a5a99aebe2a4c81bbdbccb1778ddc0dd70b09f1dea42ed4bd04189a64d959bb761baf7dde0230ed3a49774ce3bacac8fde313ec82d8cf1af329d278f00ce8ac01cb673fc4ae42ac43e794735dce8bfe3dd93af3e989ac3db78db752108ce6443476093406d6bfb2adf6c1e5644574263dd0404b2a850ed9697d9d632e861b234b50e786326652305ea46a4a245eca904c8670cfd83d8117b28a085a0157d389cd9787ca7abf43d52089d9973fd8475bf85873cb278721a5994557e680379138d9bf86c1c3d70a39438dae43c9b4221e3981297a7cddc17a1b083ea081c866b162a27f9af5b3b96cacf35cf622c11d195d06202168629e60a71a61458347c513619cf43d406d8f221540593506c3d4fa91c6ce842dcd7a89c8bb5afd7cb467de6c600f11d7c17ea0cd491d083cb6c46de640ed93b18807fe5a108bef7c83b755938080162db12ecb76dba7bbabe1684a13db423b3f73c555231e9754da515cbfe8512b993bf7c71fb6f934b5670fc78382d432371cbaf173481199460b7ad9758e9b1a950d53ae2dea14be48b530a57b3e9a74d681dd77ffe7da8f725d56fc311fc3141c2cd80ef450ae0cbed4472abae6aa445498514c59207b3220a2603d0675d26ea4637743ca578d21988c79472febc81f7ecc706005e9b44b840917274fb059d90b1ac6474503863f3d84da8dd243d34f4bbbc2c8b6ac4653f5db1f5858f29f38a5cd523553345428e1d2b730388b154a78051cdc61b20787155f4d0299218935e7863527df733834b59f3faa7a47206fbc91882dd167879d16038eb803627187146f70f0689ebd6cfb1e7b24f0d7e1c38629103495ae920ce14102b5c2a4bd7a00557bf57120efc01ed2b66f33caf242fa4d6acc7423cf83998eb0cb4d9f324200394d982bbcbf6e7d00d633d768a277ad7ddc7ea157cc9dae559decb736a5da3984d489cbd77c5ddd30e9552a0a5ab6fd95c905c67207f01d3bca8b5f30ffde4b2b5803ea5fe250a67626867ae6c61d99296240bd47f4f0401e97ac9280c35e41d51eb0beaa540e6fd2d3a763c62119a148abde09cf0bd0408558544b79cbadca0affa7f93085ed83de127b50b1665", 0x1000}, {&(0x7f0000000340)="f07ce988c4ab92973f009e811e71e5f0f562fef604b50c9715b4c2a5af3a2c547bf32d7b1e8b68e05f11d2cc6cb55705af4dac4c47dbfd720a815199292ff86fde1a7730002f032d39e868dcc1f03f3a84249e5f7c713a5260d5799634197ddd005ce3c7bed4cc33a84dba3ca142acbbc0b99cd40c7c050432ea18e8cc60398314bf24c38aeeb00b82bc757e8b8a56e9c97e57cff78398fcde7f08288d119bd4a39acea7ec1283e9d993d7b35f3f2f56ce8bcbfb6cd572d035e1e336326eb062ccb5c0be9286c114fac1506015b2af", 0xcf}, {&(0x7f0000000440)="ac1f63", 0x3}], 0x7, 0xd) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x4fa8, 0x0, 0x0, 0x2408, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r5, r6, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 19:01:25 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd$rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c050000000084a7", @ANYRESHEX=r0, @ANYBLOB="00f1"]) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616e616d653d275c2c706f736958c2636c2c616363650e733d636c69656e742c6d6d61702c63616368653d667363616368652c6e6f6465766d61702c6d73697a653d3078666666666666666666666666666666642c63616368653d6e6f6e652c667363616368652c667363616368652c00"]) getpeername(r3, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000340)=0x80) [ 976.957589] loop3: detected capacity change from 0 to 40 [ 976.970611] FAT-fs (loop3): invalid media value (0x00) [ 976.971154] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 977.054841] 9pnet: Could not find request transport: fd$rfdno=0x0000000000000003 [ 977.061854] 9pnet: Could not find request transport: fd$rfdno=0x0000000000000003 [ 977.104392] loop3: detected capacity change from 0 to 40 [ 977.109854] FAT-fs (loop3): invalid media value (0x00) [ 977.110316] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:40 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:01:40 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:01:40 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:40 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:40 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 991.501166] loop3: detected capacity change from 0 to 40 [ 991.523389] FAT-fs (loop3): invalid media value (0x00) [ 991.524130] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:40 executing program 5: r0 = fork() wait4(r0, &(0x7f0000000240), 0x8, 0x0) tgkill(r0, r0, 0x6) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x7f) prlimit64(r0, 0x5, &(0x7f0000000040)={0x7, 0x94}, &(0x7f0000000140)) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 19:01:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 991.700276] loop3: detected capacity change from 0 to 40 [ 991.794199] FAT-fs (loop3): bogus number of FAT sectors [ 991.794940] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:41 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:41 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 992.251947] loop3: detected capacity change from 0 to 40 19:01:41 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 992.260209] FAT-fs (loop3): bogus number of FAT sectors [ 992.260984] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:53 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:53 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1004.180247] loop3: detected capacity change from 0 to 40 19:01:53 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:01:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x108000, 0x0, 0x0, 0x180080, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) 19:01:53 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:01:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1004.219323] FAT-fs (loop3): bogus number of FAT sectors [ 1004.220106] FAT-fs (loop3): Can't find a valid FAT filesystem 19:01:53 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:01:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c10"]) 19:02:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:02:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:05 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:05 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:02:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000049ffff0900000008003950323030302e4cd9bc0954a0f43c1009ae6e0b6df3"], 0x15) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d8ae33d698903a1c1582ba8a11bdb56d8d1480b2235bd2dd74959a5d446dc59ea4554bf12222fc48866325eb66d1ca54eebd312ecbd80e4c242a18529b437bca92d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 19:02:05 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:05 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 1016.702932] loop3: detected capacity change from 0 to 40 19:02:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:05 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1016.798768] loop3: detected capacity change from 0 to 40 [ 1016.808527] 9pnet_fd: Insufficient options for proto=fd 19:02:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:05 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1016.850858] 9pnet_fd: Insufficient options for proto=fd [ 1016.872844] loop3: detected capacity change from 0 to 40 [ 1029.531243] loop3: detected capacity change from 0 to 40 [ 1029.542268] loop5: detected capacity change from 0 to 5 19:02:18 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0xc7, 0x9, &(0x7f0000000880)=[{&(0x7f00000001c0)="8aedd04e63758ed602214273926ae3a21c0036016eaf08db573817fc1057187300fd", 0x22, 0x45}, {&(0x7f0000000400)="598dba91732089dbd8d30a60d1ca87de636b87ecd9d8db56a2efd49f2e87cf7a0b958e0da5cbae3ed7ae13c1f5a430821a16e50277e94a2b6a68c7eacb98ce51036336d8fe3c7e167ad5d4d191ddc9da0e6c108ba53e80b0cf94cc7d4459dca9033a40fbfe39b5791ea33abc0a43d76f124d6ddb2b50fd1a42250bec5cd007203b48e802e51dfae6763f602b8401d881da5d86f7f083e8", 0x97, 0xcc}, {&(0x7f00000004c0), 0x0, 0x7}, {&(0x7f0000000500)="41617b2e0f3f9180f899ebb2d9b3cf8343e10d9840c4e38c8ca02dfcbea42768316be2ccf2e19abd994d127010129347d2570af830ffe8797cdb258d6a93256fbf6fba6f9277d89d3e91790bd2248e1c0d49770af39eff641b7cdadf59203fb3d3a9fc15480f3d8ee52faa82a91fb06b1a04d7030f4c7484e0c13e896f", 0x7d, 0x6}, {&(0x7f0000000580)="0173a948875cb7a1e666da24e8d0b48bad649cbd5d207419bf", 0x19, 0x597}, {&(0x7f00000005c0)="5c2077953b1da4b35972bb60e1ca3966e597a04d7c51e699b99cf13c8168b14d1811366a006e0bc8f8138ef52460094413cd45b99c89160bfff3fe2e608d500c1829eab7f46fd9d11166221f6b151e95ed7329490c14cc4f24d2a28924af9dca71f977d9569bf03f", 0x68, 0x6}, {&(0x7f0000000640)="d8f6b99f43bfe29e9e6131d9228701701f8e675a6e76b2e99e9a48ff8402f5ec720631192987d0010839e1286022122aad2fe9984009de007069d149390cb27ce3c7e7d558", 0x45, 0x3ff}, {&(0x7f00000006c0)="af67e72bf7a248f3185488dc25474cbee7ea6dee46cf2ee0a4514bf1310b3cb4e87121a02d273e60135dae0b543cddc31b23b51cdaf24059bde79cdb9397d88fe2e57c98cdb438e81abd1f487aef505bc22274c2eadb08085ba67f8b2d7c1c31ab5117c9501e8d26552c3d3ca870916a09382b59ad9f4410cc1c49a0a6274febc8918b5f29b2483085d3427668bbe8f9f85ba2107b5fc2b530eef04be73bf3b049def8a35a84b5ee4b947c1fb9", 0xad, 0x5}, {&(0x7f0000000780)="ac3a72d78f516a5d534625a409e8b5ea43267b6e0fe0b9e0873dc67e5709905bd6505d5493adcf14daa92b0803ce6e4c63b710190ab8ae50d7f1f3d1bf362708e75938bd2c7d7db2cb4d77484c43fcdc60d388328f2bff4f9a95884b7193f374cc259f07973fbcba4807133f9f82a8073c583f3ff338981e493b036cb3d1ea9d7c53b4a9f439cd6d7a0eac703bf4c1f3ae54fd127e4c03aa240aa2cc2de14a9715a89492085971f2f17605986bffb05af1945db1270c119a90047f2b7e20d6f78a8fa7fd04121d048b958a93deb3", 0xce, 0x8a}], 0x60804, &(0x7f0000000980)={[{@nodiscard}], [{@context={'context', 0x3d, 'staff_u'}}]}) recvfrom(0xffffffffffffffff, &(0x7f00000009c0)=""/143, 0x8f, 0x1, &(0x7f0000000a80)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(seqiv(morus640-sse2))\x00'}, 0x80) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '.['}}, {@nodevmap}, {@afid={'afid', 0x3d, 0x5}}], [{@obj_type={'obj_type', 0x3d, '+\xfb\x00'}}, {@hash}, {@hash}, {@euid_gt={'euid>', r2}}, {@smackfsdef={'smackfsdef', 0x3d, '\'('}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}) 19:02:18 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:18 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:02:18 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1029.642579] loop5: detected capacity change from 0 to 5 19:02:18 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:18 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x1094010, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '**%&!,!'}}, {@loose}, {@uname={'uname', 0x3d, '9p\x00'}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@euid_lt={'euid<', 0xee00}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:02:18 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1029.818644] loop3: detected capacity change from 0 to 40 19:02:18 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:02:31 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000880)=0xe8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/23, 0x17}, {&(0x7f0000000a40)=""/214, 0xd6}, {&(0x7f0000000b40)=""/86, 0x56}, {&(0x7f0000000bc0)=""/25, 0x19}], 0x5, &(0x7f0000001cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x60, &(0x7f0000001dc0)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x7fffffff, 0xa, &(0x7f0000000680)=[{&(0x7f0000000180)="6b7a37534b24347de8972bb9456772a3019ea2b2d2567cdec3fb53cd561fae871f671fb46614db3c2f238a922ffea64c87626681a42c12584594bdb3661d4c8cc1cb1a153d3769e811df8e2e62f53d85f8c1f774674a3b1c948fb287e1db1e8af07472711f953f08f7b4f411c1b5459389f32ab9aee33e11f870c209b81e38e0b7e903c8005b599409407b62abee262cf4d7cf72defabf21289be874310a55c97fb8d99c79ecb0f7d145a8f9ae3ee191b48b23933e12ee34971d642a4a2dde97042c35", 0xc3}, {&(0x7f0000000280)="34211023", 0x4, 0x4}, {&(0x7f00000002c0)="47aeb60b4f389ef3e53d89998d2efba1964ae24633c3aa97e88d10676dff468ddd9c423a5d2dcd9bbf476bb1cd41205a65e84223c9005ca1908d61890640e280cd71ae3100e911ed0c4afea9be56d1482d0bf89794ad6c392d0703e8f8b3dcebf515a19124484f0d441c5955fd26826c77eea56933586e4d77dc717b1cf8123387b03cac2574a859d663a192de60e29777231b12118a17d459a9821f7e2fa46d90ab846d69edb08bf5f2f57764f1fc057b6c226cb6552d0ffc2049faccd05a1f1edf424b44d4293a8b11da4cfd2a19c303", 0xd1, 0x800}, {&(0x7f0000000c40)="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", 0x1000, 0xfffffffffffffc00}, {&(0x7f00000003c0)="ef6947f6dab52e45b7ca268591eb1ed7ca8331a636d505874ea37989be135f8d573d4df63caac7905ad11bb1fdd48d69f070721add64ee3856ae2d3975f805c509321ce62f1d19e24fb52303841af68021960d3838dce235629beb9329343f8e0ff3f76a9054588e574836c295a10eccbd3d4d2970e4e12ae8d9aa82db83f7c3b1a8e2897dbafc48a80a029c811780", 0x8f, 0x8}, {&(0x7f0000000480)="95671d11675bbe39f0010f698ae1d62e6ffe8423ee3d10029f29ff955004afeb57cbbc006fedbe12098158e9c7b1f9205f3a2130495af0af6f9b795eeea7152022eb83f8782630d21ef553b2240ea85e42af3aa814f6af9a7b5a84c5f2e62bbd941b10965c377f4c327aae6c1744c9c2f23622cbbaaebc59481529d7", 0x7c, 0x5}, {&(0x7f0000000500)="11bb840cd9b0e22a73c5e901549c6b9b8ae5f4b612dec0316756ded87b657c819d090e03d10f66521745a84e762d3baf30d963d61ddcc2f3", 0x38, 0x57}, {&(0x7f0000000540)="be48fb9bc3fc17b39695a637d9edbae3be9bfce5f0a4d7f11f593f9cfa9910eab3642a13136358923235141a74f16a6da8435873b9530723624e8f6c5139526e415003cd7a693e641360cd4ad41b306e589919f0", 0x54, 0xd8}, {&(0x7f00000005c0)="209f1a41b4805f5b1b", 0x9, 0x996b}, {&(0x7f0000000600)="f4d7a58aa6c421e1c6170c22087b8786b6e9e9aa2b9ef8a95179c14484cb5920c1d3e40529bbb294b60383fb6683797b137c41335f748b983e8a420545856e3366f8ae5b99ebd34e6c3a5df170b24e3e46b66c73f9526158d274065532ee3da29d525d0648e210f8f3c7b33903191111b26cb5", 0x73, 0x7}], 0x2000040, &(0x7f0000001e00)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x25]}}, {@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x33]}}}}, {@size={'size', 0x3d, [0x37, 0x35, 0x39, 0x35, 0x34, 0x6b, 0x74, 0x32, 0x37]}}, {@huge_always}], [{@fsname}, {@obj_type={'obj_type', 0x3d, 'rfdno'}}, {@uid_gt={'uid>', r0}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_eq={'uid', 0x3d, r1}}]}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) 19:02:31 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:31 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:31 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:31 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:31 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1042.829630] loop3: detected capacity change from 0 to 40 [ 1042.897586] loop5: detected capacity change from 0 to 264192 [ 1042.898307] tmpfs: Bad value for 'nr_blocks' [ 1042.922835] loop5: detected capacity change from 0 to 264192 [ 1042.923695] tmpfs: Bad value for 'nr_blocks' 19:02:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:31 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) 19:02:32 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1043.120197] loop3: detected capacity change from 0 to 40 19:02:32 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:32 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) stat(&(0x7f0000001340)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@cache_loose}, {@access_user}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@cache_mmap}], [{@obj_role={'obj_role', 0x3d, '$))'}}, {@fsname={'fsname', 0x3d, 'fsmagic'}}, {@obj_user={'obj_user', 0x3d, 'wfdno'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}]}}) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0xdc67}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_appraise}]}}) 19:02:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:45 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:45 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) 19:02:45 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x88000) 19:02:45 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:45 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:45 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:45 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) [ 1056.212000] loop3: detected capacity change from 0 to 40 19:02:45 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000180)={{r0}, 0x5, &(0x7f0000000140)=[0xfffffffffffffffe, 0x8, 0x1, 0x7, 0xc000000], 0xa7, 0x3, [0x1, 0x7fff, 0x1, 0xfffffffffffffffe]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 19:02:45 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) [ 1056.313790] loop3: detected capacity change from 0 to 40 19:02:45 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:45 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:45 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:02:45 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) 19:02:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:59 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:59 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:59 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:02:59 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:59 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:02:59 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) [ 1070.134995] loop3: detected capacity change from 0 to 40 19:02:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x20001, &(0x7f00000001c0)='9p\x00') 19:02:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1070.268060] loop3: detected capacity change from 0 to 40 19:02:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:02:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:02:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 1070.370958] loop3: detected capacity change from 0 to 40 [ 1082.379875] loop3: detected capacity change from 0 to 40 19:03:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:03:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:03:11 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) 19:03:11 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:03:11 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="44ba8c09"]) [ 1082.505866] 9pnet_fd: Insufficient options for proto=fd 19:03:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 1082.512589] 9pnet_fd: Insufficient options for proto=fd 19:03:11 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:03:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) 19:03:11 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:11 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x4000, 0x28, 0x1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xceae, 0x6}}, './file0\x00'}) 19:03:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) [ 1082.598863] loop3: detected capacity change from 0 to 40 19:03:24 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:03:24 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:03:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x8000000000000, 0x5, &(0x7f0000000440)=[{&(0x7f0000000180)="d0d6d1d0f3bbac1810d7bad124197330ca317c7878769068f523a07f4f87821de0c87c3161416af87ad86b9d1d552fa6196a3508950bb349e837511d89b418dda139bdf08760a27a9f5eb189a2cf367f5f1ca25900eae2633078306253dc5074c5acbb63df9e1845b1b84f9a22d45c387f67b7e735d3588433e8d0be0ba942f97a1d78f2b1be917c612d47dbb432e889f9756e9da6e27acb8ab704b3aced4bb9192e84ec4f3d1e", 0xa7, 0x10001}, {&(0x7f0000000240)="e3ceac2c997329456f189fc9f808b1bcc4d65d1813e26bdf1a4a74ea47f41370f239798facf0836f67e2000aacd082958cf1f5442bed1b599c86f796e2", 0x3d, 0x1f}, {&(0x7f0000000280)="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", 0xfc, 0x7}, {&(0x7f0000000380)="17d516c1755d20edafc2e7c47ca368e21f859b8ab4ce85fd74325d516cdda757d684e983df12665d2c19fd29eefedc8728d277118fb893d800418143c0228c1e433f8e58d8c293bc5f7613300ce4d011f0c1a6c9d558ce8f513565f33855ff0fd8a42fbc994f6252f3e2961c0d3dc598422d39aaf2d2", 0x76, 0x4}, {&(0x7f0000000400)="0cc1f620621b55951c1bfd7db73a567843605b325f219f806ab85e875b0bce429207e20a9593", 0x26, 0x400}], 0x400, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}], [{@subj_user={'subj_user', 0x3d, '+[#{}#'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, 'rfdno'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}]}) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x2, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:03:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)="cec72eee0d3a4ceb14d9fb26f9e989e38e3e633c1b9d6bfcd9760cd9b8ad954efc77653a57e3aca6", 0x28}, {&(0x7f0000000280)="dcf1cd199adf1982db6cf15f22536df24922f5788df492dbc7bffe4e0e11611421e7b2521860e8f22d37067109b8a7c1d596383abb88bf6cf498cfced609d5823ed75775116706f81f07ca6a041de9cf360be7f48c529bda107d20aec7627634ac72a52589da15aa43f3e056a336aba03c2d52019cc7b383534a1106d0a4a7abd1272340c5817c18d1a728041020772e38e6550494a840ea0fd50f7e550ee3449adfa79456603e91b90b430451d112a63f2b52ca93606b9d8bd30918e13e00817b48d471e96b9e48d8ec2d7336353a79", 0xd0}, {&(0x7f0000000380)="f66f83c4479255f805cf730767936b43f1fbce66337772f86e4fdc4eaf090d9056fb31c937d340e7ba8194fa209d3a2f2d5abc633ded9a2f71bcf6a23fd9c8149593b13d823cc435ee443bba68267fbd6de2affed27e7c7a163a8260837e0765252dd3c4f77e5e941c37c1e781985283f6d5e139b429bb9bf3f284a105fe5dd40b939f00d3755c6565aff4ed343f3c54bdfebc36cfc7b1ff91193b4d62dc4fadcee6f9c62f4f80dce41f7fb0097437e85f8296ee545e2c8880c0f630f5574910b4fa642545ef3f4199a687b75aa614fcaf19818103d370c34eb686b007782748", 0xe0}], 0x3, 0x800, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) 19:03:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:03:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) 19:03:24 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:24 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) [ 1095.669916] loop3: detected capacity change from 0 to 40 [ 1095.691003] loop5: detected capacity change from 0 to 264192 [ 1095.696304] ext3: Unknown parameter 'subj_user' 19:03:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) 19:03:24 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) [ 1095.730135] loop5: detected capacity change from 0 to 264192 19:03:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1095.734260] ext3: Unknown parameter 'subj_user' 19:03:24 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:24 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1095.786202] loop3: detected capacity change from 0 to 40 19:03:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:03:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x8000000000000, 0x5, &(0x7f0000000440)=[{&(0x7f0000000180)="d0d6d1d0f3bbac1810d7bad124197330ca317c7878769068f523a07f4f87821de0c87c3161416af87ad86b9d1d552fa6196a3508950bb349e837511d89b418dda139bdf08760a27a9f5eb189a2cf367f5f1ca25900eae2633078306253dc5074c5acbb63df9e1845b1b84f9a22d45c387f67b7e735d3588433e8d0be0ba942f97a1d78f2b1be917c612d47dbb432e889f9756e9da6e27acb8ab704b3aced4bb9192e84ec4f3d1e", 0xa7, 0x10001}, {&(0x7f0000000240)="e3ceac2c997329456f189fc9f808b1bcc4d65d1813e26bdf1a4a74ea47f41370f239798facf0836f67e2000aacd082958cf1f5442bed1b599c86f796e2", 0x3d, 0x1f}, {&(0x7f0000000280)="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", 0xfc, 0x7}, {&(0x7f0000000380)="17d516c1755d20edafc2e7c47ca368e21f859b8ab4ce85fd74325d516cdda757d684e983df12665d2c19fd29eefedc8728d277118fb893d800418143c0228c1e433f8e58d8c293bc5f7613300ce4d011f0c1a6c9d558ce8f513565f33855ff0fd8a42fbc994f6252f3e2961c0d3dc598422d39aaf2d2", 0x76, 0x4}, {&(0x7f0000000400)="0cc1f620621b55951c1bfd7db73a567843605b325f219f806ab85e875b0bce429207e20a9593", 0x26, 0x400}], 0x400, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}], [{@subj_user={'subj_user', 0x3d, '+[#{}#'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, 'rfdno'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}]}) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x2, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:03:36 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:03:36 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:03:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="98924ea99351e6a5"}}) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d138182e87ea43b707d5c5a8c45820a842a3ac5e329b1d7d0cf3f04000000cbc1ccdd9650059fd6bcc6eeac5e65bf87327c479324", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 19:03:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1107.896147] 9pnet_fd: Insufficient options for proto=fd [ 1107.901787] 9pnet_fd: Insufficient options for proto=fd 19:03:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) 19:03:36 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:36 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:03:36 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:36 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x3000, 0x103) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r3, r4, 0x0, 0x2) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000180)={{r3}, 0x1, &(0x7f0000000140)=[0x3], 0x3, 0x2, [0x6, 0x0, 0x5, 0x1]}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x2) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './file1', [{0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {}, {0x20, '-^$,'}, {0x20, '9p\x00'}, {0x20, '+,'}, {0x20, '{!}*]:n'}], 0xa, "202353ec88000e422151c4caa13e22d5b10db941efc5290b924277b008312f884088081e"}, 0x50) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfd\a\x00=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) [ 1107.968104] loop3: detected capacity change from 0 to 40 19:03:37 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1108.059872] 9pnet_fd: Insufficient options for proto=fd 19:03:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) 19:03:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e00003fd0635e2b8f4e3ae0de19c244b92f045f3dfbf70f1ca93d0446a1c273e90ef70669d8976a8d344cd9e4c41ff6e16c4370418e5f003bc9ab2814b5dbc2803ef9d4e25a1222b1a052f04db909914985f9fd26c389fbd691c2405c0f5d41ab98434cb5aa244c9aa9313af64940c2d8dbb14d401bbd", @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 1108.128420] 9pnet_fd: Insufficient options for proto=fd [ 1108.130738] 9pnet_fd: Insufficient options for proto=fd 19:03:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1108.176421] loop3: detected capacity change from 0 to 40 19:03:49 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:49 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x4, 0x401}, {0x3, 0x4, 0x800}, {0x3, 0x6}], 0x3, &(0x7f0000000140)={0x0, 0x3938700}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 19:03:49 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) 19:03:49 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:49 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:03:49 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1120.372277] loop3: detected capacity change from 0 to 40 19:03:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:49 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x800) 19:03:49 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:03:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) 19:03:49 executing program 5: ftruncate(0xffffffffffffffff, 0x9) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:03:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1120.651944] loop3: detected capacity change from 0 to 40 19:03:49 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:03:49 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:03:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) 19:03:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:03:49 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r4, r5, 0x0, 0x2) bind$bt_sco(r5, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendfile(r2, r3, 0x0, 0x2) move_mount(r3, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x45) 19:03:49 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1120.947048] loop3: detected capacity change from 0 to 40 19:03:49 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:04:02 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) 19:04:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:04:02 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) 19:04:02 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 19:04:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) 19:04:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r3, r4, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x1300000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}], [{@dont_hash}]}}) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:04:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:02 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1133.667273] loop3: detected capacity change from 0 to 40 19:04:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) 19:04:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1133.844586] loop3: detected capacity change from 0 to 40 19:04:02 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) 19:04:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:04:02 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) 19:04:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) 19:04:02 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) [ 1134.046473] loop3: detected capacity change from 0 to 40 19:04:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:04:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) 19:04:03 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) 19:04:03 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x7, [], 0xff, "3e3b3204ece552"}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fcntl$setlease(r1, 0x400, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) [ 1134.173180] loop3: detected capacity change from 0 to 40 19:04:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) (fail_nth: 1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:04:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)="cec72eee0d3a4ceb14d9fb26f9e989e38e3e633c1b9d6bfcd9760cd9b8ad954efc77653a57e3aca6", 0x28}, {&(0x7f0000000280)="dcf1cd199adf1982db6cf15f22536df24922f5788df492dbc7bffe4e0e11611421e7b2521860e8f22d37067109b8a7c1d596383abb88bf6cf498cfced609d5823ed75775116706f81f07ca6a041de9cf360be7f48c529bda107d20aec7627634ac72a52589da15aa43f3e056a336aba03c2d52019cc7b383534a1106d0a4a7abd1272340c5817c18d1a728041020772e38e6550494a840ea0fd50f7e550ee3449adfa79456603e91b90b430451d112a63f2b52ca93606b9d8bd30918e13e00817b48d471e96b9e48d8ec2d7336353a79", 0xd0}, {&(0x7f0000000380)="f66f83c4479255f805cf730767936b43f1fbce66337772f86e4fdc4eaf090d9056fb31c937d340e7ba8194fa209d3a2f2d5abc633ded9a2f71bcf6a23fd9c8149593b13d823cc435ee443bba68267fbd6de2affed27e7c7a163a8260837e0765252dd3c4f77e5e941c37c1e781985283f6d5e139b429bb9bf3f284a105fe5dd40b939f00d3755c6565aff4ed343f3c54bdfebc36cfc7b1ff91193b4d62dc4fadcee6f9c62f4f80dce41f7fb0097437e85f8296ee545e2c8880c0f630f5574910b4fa642545ef3f4199a687b75aa614fcaf19818103d370c34eb686b007782748", 0xe0}], 0x3, 0x800, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000000)=0x3) mount$bind(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) 19:04:16 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x80) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f00000004c0)=""/232, 0x19}, {&(0x7f00000005c0)=""/90, 0x5a}], 0x5, 0x1, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}, 0x100) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pwrite64(r2, &(0x7f0000000180)="7db3426fe55b01fb287ead667dce64a7d7149b89e08f6a7a1d72c2411c900b797b9e1769925c3e0dfd626d8f70e1f28999a37f92bef73fa777948edcd34ddc1859897898ac7968ef2719e6e5d5636770c569ed834afc4247f686953d5afc6472346bae0ead67da521065a2789efda5c4c9e00fbac9f64a0a72c56052635013dfcb983d54314eda9b90a9816216505543e87463c0a1d3d3174294e6031fdf4736a3f6f390c0be2f02057f8f88ff4f7c6ea2e4d40cb3091e3f598bb9eef28f82fa0c485bcc6233cd680a6db25d67fac8befab23392a6365f1dbd0e485966b4", 0xde, 0x422c735) 19:04:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)="cec72eee0d3a4ceb14d9fb26f9e989e38e3e633c1b9d6bfcd9760cd9b8ad954efc77653a57e3aca6", 0x28}, {&(0x7f0000000280)="dcf1cd199adf1982db6cf15f22536df24922f5788df492dbc7bffe4e0e11611421e7b2521860e8f22d37067109b8a7c1d596383abb88bf6cf498cfced609d5823ed75775116706f81f07ca6a041de9cf360be7f48c529bda107d20aec7627634ac72a52589da15aa43f3e056a336aba03c2d52019cc7b383534a1106d0a4a7abd1272340c5817c18d1a728041020772e38e6550494a840ea0fd50f7e550ee3449adfa79456603e91b90b430451d112a63f2b52ca93606b9d8bd30918e13e00817b48d471e96b9e48d8ec2d7336353a79", 0xd0}, {&(0x7f0000000380)="f66f83c4479255f805cf730767936b43f1fbce66337772f86e4fdc4eaf090d9056fb31c937d340e7ba8194fa209d3a2f2d5abc633ded9a2f71bcf6a23fd9c8149593b13d823cc435ee443bba68267fbd6de2affed27e7c7a163a8260837e0765252dd3c4f77e5e941c37c1e781985283f6d5e139b429bb9bf3f284a105fe5dd40b939f00d3755c6565aff4ed343f3c54bdfebc36cfc7b1ff91193b4d62dc4fadcee6f9c62f4f80dce41f7fb0097437e85f8296ee545e2c8880c0f630f5574910b4fa642545ef3f4199a687b75aa614fcaf19818103d370c34eb686b007782748", 0xe0}], 0x3, 0x800, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000000)=0x3) mount$bind(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) 19:04:16 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) 19:04:16 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1147.194893] loop3: detected capacity change from 0 to 40 [ 1147.217702] loop7: detected capacity change from 0 to 40 19:04:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x211143, 0x0) fcntl$setstatus(r0, 0x4, 0x44400) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r0, r1, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c80)=ANY=[@ANYBLOB="30000500", @ANYRES16=r4, @ANYBLOB="010200000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="14002c8008000000000000000800000000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4048011) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[]) 19:04:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:04:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) [ 1147.429463] syz-executor.7: attempt to access beyond end of device [ 1147.429463] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1147.431249] syz-executor.7: attempt to access beyond end of device [ 1147.431249] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40 19:04:16 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r0, &(0x7f0000000040)=0x80000008, 0xfffffffffffffff8) recvmsg$unix(r3, &(0x7f0000000500)={&(0x7f00000001c0), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000000380)=""/107, 0x6b}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000001000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x90}, 0x40002002) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1147.485582] loop3: detected capacity change from 0 to 40 19:04:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 1) 19:04:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)="cec72eee0d3a4ceb14d9fb26f9e989e38e3e633c1b9d6bfcd9760cd9b8ad954efc77653a57e3aca6", 0x28}, {&(0x7f0000000280)="dcf1cd199adf1982db6cf15f22536df24922f5788df492dbc7bffe4e0e11611421e7b2521860e8f22d37067109b8a7c1d596383abb88bf6cf498cfced609d5823ed75775116706f81f07ca6a041de9cf360be7f48c529bda107d20aec7627634ac72a52589da15aa43f3e056a336aba03c2d52019cc7b383534a1106d0a4a7abd1272340c5817c18d1a728041020772e38e6550494a840ea0fd50f7e550ee3449adfa79456603e91b90b430451d112a63f2b52ca93606b9d8bd30918e13e00817b48d471e96b9e48d8ec2d7336353a79", 0xd0}, {&(0x7f0000000380)="f66f83c4479255f805cf730767936b43f1fbce66337772f86e4fdc4eaf090d9056fb31c937d340e7ba8194fa209d3a2f2d5abc633ded9a2f71bcf6a23fd9c8149593b13d823cc435ee443bba68267fbd6de2affed27e7c7a163a8260837e0765252dd3c4f77e5e941c37c1e781985283f6d5e139b429bb9bf3f284a105fe5dd40b939f00d3755c6565aff4ed343f3c54bdfebc36cfc7b1ff91193b4d62dc4fadcee6f9c62f4f80dce41f7fb0097437e85f8296ee545e2c8880c0f630f5574910b4fa642545ef3f4199a687b75aa614fcaf19818103d370c34eb686b007782748", 0xe0}], 0x3, 0x800, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000000)=0x3) mount$bind(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) 19:04:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1147.610362] loop6: detected capacity change from 0 to 40 [ 1147.640161] FAULT_INJECTION: forcing a failure. [ 1147.640161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1147.641661] CPU: 0 PID: 7511 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1147.642651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1147.643635] Call Trace: [ 1147.644075] [ 1147.644369] dump_stack_lvl+0xc1/0xf0 [ 1147.644877] should_fail_ex+0x4b4/0x5b0 [ 1147.645388] _copy_from_user+0x2e/0x180 [ 1147.645894] __import_iovec+0x50d/0x820 [ 1147.646415] ? find_held_lock+0x2c/0x110 [ 1147.646950] import_iovec+0x87/0xb0 [ 1147.647424] vfs_writev+0xc1/0x660 [ 1147.647897] ? __pfx_vfs_writev+0x10/0x10 [ 1147.648417] ? __fget_files+0x24e/0x480 [ 1147.648917] ? lock_release+0x1e3/0x680 [ 1147.649430] ? __pfx_lock_release+0x10/0x10 [ 1147.650009] ? __fget_files+0x270/0x480 [ 1147.650549] __x64_sys_pwritev+0x233/0x310 [ 1147.651120] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1147.651745] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1147.652413] do_syscall_64+0x3f/0x90 [ 1147.652903] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1147.653572] RIP: 0033:0x7fb6935b7b19 [ 1147.654029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.656161] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1147.657114] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1147.658034] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1147.658917] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.659804] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 1147.660710] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1147.661635] [ 1147.675184] loop7: detected capacity change from 0 to 40 19:04:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fdfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 1147.792577] syz-executor.7: attempt to access beyond end of device [ 1147.792577] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1147.808104] syz-executor.7: attempt to access beyond end of device [ 1147.808104] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1147.846322] 9pnet: Could not find request transport: fdfdno=0x0000000000000003 [ 1147.919050] 9pnet: Could not find request transport: fdfdno=0x0000000000000003 19:04:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:04:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 1) 19:04:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:04:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 2) [ 1159.535791] loop3: detected capacity change from 0 to 40 [ 1159.549390] FAULT_INJECTION: forcing a failure. [ 1159.549390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.550194] CPU: 1 PID: 7537 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1159.550731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.551287] Call Trace: [ 1159.551474] [ 1159.551633] dump_stack_lvl+0xc1/0xf0 [ 1159.551914] should_fail_ex+0x4b4/0x5b0 [ 1159.552194] _copy_from_user+0x2e/0x180 [ 1159.552503] __import_iovec+0x50d/0x820 [ 1159.552785] ? find_held_lock+0x2c/0x110 [ 1159.553084] import_iovec+0x87/0xb0 [ 1159.553350] vfs_writev+0xc1/0x660 [ 1159.553614] ? __pfx_vfs_writev+0x10/0x10 [ 1159.553929] ? __fget_files+0x24e/0x480 [ 1159.554206] ? lock_release+0x1e3/0x680 [ 1159.554481] ? __pfx_lock_release+0x10/0x10 [ 1159.554787] ? __fget_files+0x270/0x480 [ 1159.555076] __x64_sys_pwritev+0x233/0x310 [ 1159.555377] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1159.555720] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.556107] do_syscall_64+0x3f/0x90 [ 1159.556382] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1159.556748] RIP: 0033:0x7f92c35cab19 [ 1159.557002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.558228] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1159.558744] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1159.559216] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1159.559695] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.560165] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 1159.560620] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1159.561355] 19:04:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)="cec72eee0d3a4ceb14d9fb26f9e989e38e3e633c1b9d6bfcd9760cd9b8ad954efc77653a57e3aca6", 0x28}, {&(0x7f0000000280)="dcf1cd199adf1982db6cf15f22536df24922f5788df492dbc7bffe4e0e11611421e7b2521860e8f22d37067109b8a7c1d596383abb88bf6cf498cfced609d5823ed75775116706f81f07ca6a041de9cf360be7f48c529bda107d20aec7627634ac72a52589da15aa43f3e056a336aba03c2d52019cc7b383534a1106d0a4a7abd1272340c5817c18d1a728041020772e38e6550494a840ea0fd50f7e550ee3449adfa79456603e91b90b430451d112a63f2b52ca93606b9d8bd30918e13e00817b48d471e96b9e48d8ec2d7336353a79", 0xd0}, {&(0x7f0000000380)="f66f83c4479255f805cf730767936b43f1fbce66337772f86e4fdc4eaf090d9056fb31c937d340e7ba8194fa209d3a2f2d5abc633ded9a2f71bcf6a23fd9c8149593b13d823cc435ee443bba68267fbd6de2affed27e7c7a163a8260837e0765252dd3c4f77e5e941c37c1e781985283f6d5e139b429bb9bf3f284a105fe5dd40b939f00d3755c6565aff4ed343f3c54bdfebc36cfc7b1ff91193b4d62dc4fadcee6f9c62f4f80dce41f7fb0097437e85f8296ee545e2c8880c0f630f5574910b4fa642545ef3f4199a687b75aa614fcaf19818103d370c34eb686b007782748", 0xe0}], 0x3, 0x800, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000000)=0x3) mount$bind(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) 19:04:28 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="23f8"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = getgid() setresgid(0xffffffffffffffff, r3, 0x0) r4 = getgid() setresgid(0xffffffffffffffff, r4, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=0xee01, @ANYBLOB="040000000000000008000100", @ANYRES32, @ANYBLOB="d2e31c47", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="35988008", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="10000700000000002000030000000000"], 0x5c, 0x2) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000480)="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") io_setup(0xd29, &(0x7f0000000780)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x2, 0x0, r6, 0x0}]) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000f33dc60dc92aea4cac40e31bf6b6a5fbbedaa6925dbec1e31b7ca216ddcd19e40ca735fdceac0fe1896e9337cef2384fd0ca082c8ea1b63a9c47e9ee", @ANYRES16=0x0, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT=r4], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@cache_none}, {@privport}], [{@uid_lt={'uid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x17}}, {@measure}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@audit}]}}) 19:04:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 1) 19:04:28 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1159.564853] loop6: detected capacity change from 0 to 40 [ 1159.582907] FAULT_INJECTION: forcing a failure. [ 1159.582907] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1159.583956] CPU: 1 PID: 7541 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1159.584520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.585078] Call Trace: [ 1159.585271] [ 1159.585434] dump_stack_lvl+0xc1/0xf0 [ 1159.585712] should_fail_ex+0x4b4/0x5b0 [ 1159.585988] prepare_alloc_pages+0x178/0x500 [ 1159.586297] ? stack_trace_save+0x90/0xd0 [ 1159.586579] __alloc_pages+0x149/0x480 [ 1159.586847] ? lock_acquire+0x19a/0x4c0 [ 1159.587117] ? __pfx___alloc_pages+0x10/0x10 [ 1159.587425] ? lock_release+0x1e3/0x680 [ 1159.587699] ? xas_start+0x14e/0x710 [ 1159.587982] alloc_pages+0x1a0/0x260 [ 1159.588254] filemap_alloc_folio+0x374/0x410 [ 1159.588583] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1159.588922] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1159.589290] __filemap_get_folio+0x285/0x8d0 [ 1159.589598] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1159.589934] pagecache_get_page+0x2e/0x120 [ 1159.590246] ? __pfx_fat_get_block+0x10/0x10 [ 1159.590553] block_write_begin+0x35/0x450 [ 1159.590842] cont_write_begin+0x4fe/0x700 [ 1159.591152] ? __pfx_fat_get_block+0x10/0x10 [ 1159.591451] ? __pfx_cont_write_begin+0x10/0x10 [ 1159.591786] ? __pfx___lock_acquire+0x10/0x10 [ 1159.592100] fat_write_begin+0x89/0x180 [ 1159.592384] ? __pfx_fat_get_block+0x10/0x10 [ 1159.592701] cont_write_begin+0x2fc/0x700 [ 1159.592992] ? __pfx_fat_get_block+0x10/0x10 [ 1159.593322] ? __pfx_cont_write_begin+0x10/0x10 [ 1159.593654] ? lock_release+0x1e3/0x680 [ 1159.593928] ? __pfx_fault_in_readable+0x10/0x10 [ 1159.594277] fat_write_begin+0x89/0x180 [ 1159.594563] ? __pfx_fat_get_block+0x10/0x10 [ 1159.594884] generic_perform_write+0x25a/0x580 [ 1159.595210] ? __pfx_generic_perform_write+0x10/0x10 [ 1159.595576] ? __pfx_fat_update_time+0x10/0x10 [ 1159.595885] ? __pfx_file_update_time+0x10/0x10 [ 1159.596225] ? generic_write_checks+0x2c0/0x400 [ 1159.596557] __generic_file_write_iter+0x308/0x4b0 [ 1159.596910] generic_file_write_iter+0xe7/0x350 [ 1159.597242] do_iter_readv_writev+0x211/0x3c0 [ 1159.597580] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1159.597934] ? avc_policy_seqno+0x9/0x20 [ 1159.598237] ? security_file_permission+0xb5/0xe0 [ 1159.598583] do_iter_write+0x189/0x7e0 [ 1159.598864] vfs_writev+0x1ae/0x660 [ 1159.599130] ? __pfx_vfs_writev+0x10/0x10 [ 1159.599418] ? __fget_files+0x24e/0x480 [ 1159.599704] ? lock_release+0x1e3/0x680 [ 1159.599999] ? __fget_files+0x270/0x480 [ 1159.600283] __x64_sys_pwritev+0x233/0x310 [ 1159.600592] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1159.600939] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.601315] do_syscall_64+0x3f/0x90 [ 1159.601593] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1159.601953] RIP: 0033:0x7fb6935b7b19 [ 1159.602220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.603455] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1159.603988] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1159.604466] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1159.604949] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.605462] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 1159.605973] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1159.606490] [ 1159.619806] loop7: detected capacity change from 0 to 40 [ 1159.627010] 9pnet_fd: Insufficient options for proto=fd 19:04:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:04:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 2) [ 1159.684110] FAULT_INJECTION: forcing a failure. [ 1159.684110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.685692] CPU: 0 PID: 7535 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1159.686724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.687752] Call Trace: [ 1159.688100] [ 1159.688402] dump_stack_lvl+0xc1/0xf0 [ 1159.688939] should_fail_ex+0x4b4/0x5b0 [ 1159.689483] _copy_from_user+0x2e/0x180 [ 1159.690023] __import_iovec+0x50d/0x820 [ 1159.690552] ? find_held_lock+0x2c/0x110 [ 1159.691119] import_iovec+0x87/0xb0 [ 1159.691611] vfs_writev+0xc1/0x660 [ 1159.692106] ? __pfx_vfs_writev+0x10/0x10 [ 1159.692668] ? __fget_files+0x24e/0x480 [ 1159.693198] ? lock_release+0x1e3/0x680 [ 1159.693747] ? __pfx_lock_release+0x10/0x10 [ 1159.694332] ? __fget_files+0x270/0x480 [ 1159.694884] __x64_sys_pwritev+0x233/0x310 [ 1159.695456] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1159.696121] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.696837] do_syscall_64+0x3f/0x90 [ 1159.697394] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1159.698072] RIP: 0033:0x7f4320699b19 [ 1159.698560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.700903] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1159.702154] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1159.703269] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1159.704279] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.704940] FAULT_INJECTION: forcing a failure. [ 1159.704940] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.705295] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 1159.705323] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1159.708243] [ 1159.708600] CPU: 1 PID: 7551 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1159.709184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.709773] Call Trace: [ 1159.709962] [ 1159.710128] dump_stack_lvl+0xc1/0xf0 [ 1159.710430] should_fail_ex+0x4b4/0x5b0 [ 1159.710733] ? jbd2__journal_start+0x194/0x810 [ 1159.711080] should_failslab+0x9/0x20 [ 1159.711365] kmem_cache_alloc+0x5a/0x390 19:04:28 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1159.711673] jbd2__journal_start+0x194/0x810 [ 1159.712712] __ext4_journal_start_sb+0x3d7/0x560 [ 1159.713035] ? ext4_dirty_inode+0xa5/0x130 [ 1159.713310] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1159.713644] ext4_dirty_inode+0xa5/0x130 [ 1159.713941] __mark_inode_dirty+0x1aa/0xc10 [ 1159.714235] generic_update_time+0x21b/0x2b0 [ 1159.714529] file_modified_flags+0x2d4/0x330 [ 1159.714914] ? __pfx_file_modified_flags+0x10/0x10 [ 1159.715331] ext4_buffered_write_iter+0xf9/0x460 [ 1159.715716] ext4_file_write_iter+0x3ff/0x1950 [ 1159.716118] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1159.716550] ? lock_is_held_type+0x9f/0x120 [ 1159.716898] do_iter_readv_writev+0x211/0x3c0 [ 1159.717239] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1159.717649] ? avc_policy_seqno+0x9/0x20 [ 1159.717960] ? security_file_permission+0xb5/0xe0 [ 1159.718324] do_iter_write+0x189/0x7e0 [ 1159.718600] vfs_writev+0x1ae/0x660 [ 1159.718840] ? __pfx_vfs_writev+0x10/0x10 [ 1159.719101] ? __fget_files+0x24e/0x480 [ 1159.719351] ? lock_release+0x1e3/0x680 [ 1159.719612] ? __fget_files+0x270/0x480 [ 1159.719893] __x64_sys_pwritev+0x233/0x310 [ 1159.720194] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1159.720549] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1159.720923] do_syscall_64+0x3f/0x90 [ 1159.721199] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1159.721575] RIP: 0033:0x7f92c35cab19 [ 1159.721835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.723066] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1159.723603] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1159.724091] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1159.724612] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.725132] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 1159.725661] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1159.726165] [ 1159.731289] 9pnet_fd: Insufficient options for proto=fd 19:04:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 3) [ 1159.780234] loop6: detected capacity change from 0 to 40 [ 1159.788778] syz-executor.7: attempt to access beyond end of device [ 1159.788778] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1159.796666] syz-executor.7: attempt to access beyond end of device [ 1159.796666] loop7: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1159.797619] syz-executor.6: attempt to access beyond end of device [ 1159.797619] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:04:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:04:40 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffeffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:04:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 3) 19:04:40 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 2) 19:04:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 4) 19:04:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) stat(&(0x7f0000001340)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,fscache,cachetag=,access=any,access=client,debug=0x0000000000006893,cache=fscache,cache=loose,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',smackfsroot=wfdno,fowner=', @ANYRESDEC=r2, @ANYBLOB=',context=root,fowner=', @ANYRESDEC=0xee00, @ANYBLOB=',smackfsfloor=}!,euid=', @ANYRESDEC=0xee00, @ANYBLOB="0100"]) [ 1171.458655] loop3: detected capacity change from 0 to 40 [ 1171.466206] loop6: detected capacity change from 0 to 40 [ 1171.481991] FAULT_INJECTION: forcing a failure. [ 1171.481991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1171.482913] CPU: 0 PID: 7581 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1171.483478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1171.484034] Call Trace: [ 1171.484231] [ 1171.484412] dump_stack_lvl+0xc1/0xf0 [ 1171.484736] should_fail_ex+0x4b4/0x5b0 [ 1171.485053] prepare_alloc_pages+0x178/0x500 [ 1171.485369] ? stack_trace_save+0x90/0xd0 [ 1171.485680] __alloc_pages+0x149/0x480 [ 1171.485957] ? lock_acquire+0x19a/0x4c0 [ 1171.486240] ? __pfx___alloc_pages+0x10/0x10 [ 1171.486558] ? lock_release+0x1e3/0x680 [ 1171.486840] ? xas_start+0x14e/0x710 [ 1171.487120] alloc_pages+0x1a0/0x260 [ 1171.487398] filemap_alloc_folio+0x374/0x410 [ 1171.487715] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1171.488066] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1171.488414] __filemap_get_folio+0x285/0x8d0 [ 1171.488730] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1171.489068] pagecache_get_page+0x2e/0x120 [ 1171.489375] ? __pfx_fat_get_block+0x10/0x10 [ 1171.489705] block_write_begin+0x35/0x450 [ 1171.490010] cont_write_begin+0x4fe/0x700 [ 1171.490311] ? __pfx_fat_get_block+0x10/0x10 [ 1171.490625] ? __pfx_cont_write_begin+0x10/0x10 [ 1171.490782] syz-executor.6: attempt to access beyond end of device [ 1171.490782] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1171.490933] ? __pfx___lock_acquire+0x10/0x10 [ 1171.492852] fat_write_begin+0x89/0x180 [ 1171.493133] ? __pfx_fat_get_block+0x10/0x10 [ 1171.493456] cont_write_begin+0x2fc/0x700 [ 1171.493759] ? __pfx_fat_get_block+0x10/0x10 [ 1171.494073] ? __pfx_cont_write_begin+0x10/0x10 [ 1171.494399] ? lock_release+0x1e3/0x680 [ 1171.494681] ? __pfx_fault_in_readable+0x10/0x10 [ 1171.495021] fat_write_begin+0x89/0x180 [ 1171.495303] ? __pfx_fat_get_block+0x10/0x10 [ 1171.495617] generic_perform_write+0x25a/0x580 [ 1171.495955] ? __pfx_generic_perform_write+0x10/0x10 [ 1171.496316] ? __pfx_fat_update_time+0x10/0x10 [ 1171.496621] ? __pfx_file_update_time+0x10/0x10 [ 1171.496959] ? generic_write_checks+0x2c0/0x400 [ 1171.497277] __generic_file_write_iter+0x308/0x4b0 [ 1171.497646] generic_file_write_iter+0xe7/0x350 [ 1171.497978] do_iter_readv_writev+0x211/0x3c0 [ 1171.498302] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1171.498652] ? avc_policy_seqno+0x9/0x20 [ 1171.498950] ? security_file_permission+0xb5/0xe0 [ 1171.499305] do_iter_write+0x189/0x7e0 [ 1171.499596] vfs_writev+0x1ae/0x660 [ 1171.499857] ? __pfx_vfs_writev+0x10/0x10 [ 1171.500157] ? __fget_files+0x24e/0x480 [ 1171.500426] ? lock_release+0x1e3/0x680 [ 1171.500721] ? __fget_files+0x270/0x480 [ 1171.501000] __x64_sys_pwritev+0x233/0x310 [ 1171.501306] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1171.501642] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1171.502020] do_syscall_64+0x3f/0x90 [ 1171.502296] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1171.502668] RIP: 0033:0x7f4320699b19 [ 1171.502915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1171.504131] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1171.504628] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1171.505112] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1171.505604] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1171.506083] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 1171.506564] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1171.507071] 19:04:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 4) 19:04:52 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) openat(r0, &(0x7f0000000040)='./file0\x00', 0x82400, 0x38) 19:04:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) 19:04:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 3) 19:04:52 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:52 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:04:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 5) 19:04:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, 0x0, 0x0, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1183.780513] loop6: detected capacity change from 0 to 40 [ 1183.796148] syz-executor.6: attempt to access beyond end of device [ 1183.796148] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1183.806917] FAULT_INJECTION: forcing a failure. [ 1183.806917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1183.807771] CPU: 0 PID: 7605 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1183.808320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.808878] Call Trace: [ 1183.809063] [ 1183.809226] dump_stack_lvl+0xc1/0xf0 [ 1183.809515] should_fail_ex+0x4b4/0x5b0 [ 1183.809823] prepare_alloc_pages+0x178/0x500 [ 1183.810139] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1183.810486] __alloc_pages+0x149/0x480 [ 1183.810767] ? lock_acquire+0x19a/0x4c0 [ 1183.811048] ? __pfx___alloc_pages+0x10/0x10 [ 1183.811367] ? lock_release+0x1e3/0x680 [ 1183.811654] ? xas_start+0x14e/0x710 [ 1183.811939] alloc_pages+0x1a0/0x260 [ 1183.812222] filemap_alloc_folio+0x374/0x410 [ 1183.812544] ? __pfx___lock_acquire+0x10/0x10 [ 1183.812866] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1183.813218] ? __pfx___lock_acquire+0x10/0x10 [ 1183.813536] ? lock_acquire+0x19a/0x4c0 [ 1183.813835] __filemap_get_folio+0x285/0x8d0 [ 1183.814157] pagecache_get_page+0x2e/0x120 [ 1183.814467] ext4_da_write_begin+0x328/0x8e0 [ 1183.814792] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1183.815147] generic_perform_write+0x25a/0x580 [ 1183.815483] ? __pfx_generic_perform_write+0x10/0x10 [ 1183.815850] ? __pfx_file_modified_flags+0x10/0x10 [ 1183.816214] ext4_buffered_write_iter+0x164/0x460 [ 1183.816569] ext4_file_write_iter+0x3ff/0x1950 [ 1183.816911] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1183.817275] ? lock_is_held_type+0x9f/0x120 [ 1183.817612] do_iter_readv_writev+0x211/0x3c0 [ 1183.817935] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1183.818301] ? avc_policy_seqno+0x9/0x20 [ 1183.818596] ? security_file_permission+0xb5/0xe0 [ 1183.818945] do_iter_write+0x189/0x7e0 [ 1183.819233] vfs_writev+0x1ae/0x660 [ 1183.819497] ? __pfx_vfs_writev+0x10/0x10 [ 1183.819791] ? __fget_files+0x24e/0x480 [ 1183.820076] ? lock_release+0x1e3/0x680 [ 1183.820370] ? __fget_files+0x270/0x480 [ 1183.820665] __x64_sys_pwritev+0x233/0x310 [ 1183.820970] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1183.821284] loop3: detected capacity change from 0 to 40 [ 1183.821676] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1183.822052] do_syscall_64+0x3f/0x90 [ 1183.822326] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1183.822698] RIP: 0033:0x7f92c35cab19 [ 1183.822962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.824158] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1183.824670] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1183.825149] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1183.825636] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.826113] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 1183.826590] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1183.827091] 19:04:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 6) [ 1183.869555] syz-executor.3: attempt to access beyond end of device [ 1183.869555] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:04:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:04:52 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1183.927805] loop6: detected capacity change from 0 to 40 [ 1183.929949] 9pnet: Could not find request transport: fdrfdno=ÿ™-ècdI悽Π19:04:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 4) 19:04:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1183.972316] syz-executor.6: attempt to access beyond end of device [ 1183.972316] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1183.983595] 9pnet: Could not find request transport: fdrfdno=ÿ™-ècdI悽Π19:04:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 5) [ 1184.092308] loop3: detected capacity change from 0 to 40 19:04:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:04:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x531, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/136) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r0, r1, 0x0, 0x2) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x81) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) [ 1184.120742] syz-executor.3: attempt to access beyond end of device [ 1184.120742] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:04:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 7) 19:04:53 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1184.202376] loop6: detected capacity change from 0 to 40 [ 1184.215898] syz-executor.6: attempt to access beyond end of device [ 1184.215898] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1195.795096] loop3: detected capacity change from 0 to 40 19:05:04 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d76dbf77ebbe77bfdd5e6b1c8801e311eeac06b189eaebfef382cc6cf5e3615e011a649571f23c132002c017aa19c3d80a590ea7fc70cde9ca4bdd3c4125e89b7a0689baa0c8649dd8f81ebbc8b0e183eff40f6d7d2736585b8fcd1ee86515dae325e785af839568ceb0f3e165750f407bfbb87733df3da4e427c054732269024c5f3dcb2495c05c7801efe293019b47103997623079202291663637f92f9bfe0252c7c622c4d68ac9af0e0e66da0a73d9fbdda59c2ae7ed6b341d7977a2834130d28fae7b7a066b5ff15748f247acbf9d79f766df02102b9563d0d291e096705cf9b3c1ffad600000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) fcntl$setflags(r1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x1000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000180)="3685590b55e1540df9e9c2dc4579771c1137a13619ae35dc12c4587327dd172ac3999e7848b58a4e00e112fb37a5fdaa6df1b31ce8f77fa5b4b6b14be89c50b6d71c6f674ab7cc9455247162be1123b1eedf906c4bbcbb052fe4037f7bcb737415", 0x61, 0x8}, {&(0x7f0000000200)="726a3d6416aea30ffc74f9be740da5605a1211ed44e40f420283f2639786b4db59c82efe36b66baa27446074e9a68d48e006a8360d1cc0e8a1d8a4500b2a38ba4bab64e1ace97d4595312c6a1addac5319164f0f86cadd1007183efa7a77ee9003dc32b8db2b264631b7cc85798fb86eec491feaf5432c4dc7fd3066f8c1f098a4a88bbf176529c6fa6c6a3c4397cc", 0x8f, 0xfffffffffffffff7}, {&(0x7f00000002c0), 0x0, 0x8}], 0x8000, 0xfffffffffffffffe) 19:05:04 executing program 0: sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44287f3b", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf25350000000c009900030000001800000014005500c2fe5ef803b627926befb299eec737c5050020012c00000005003400de000000"], 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8f3, 0x0, 0x7ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:04 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 5) 19:05:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 6) 19:05:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:05:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 8) [ 1195.812990] loop6: detected capacity change from 0 to 40 [ 1195.818970] FAULT_INJECTION: forcing a failure. [ 1195.818970] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.820007] CPU: 1 PID: 7651 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 19:05:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1195.820569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.821185] Call Trace: [ 1195.821373] [ 1195.821543] dump_stack_lvl+0xc1/0xf0 [ 1195.821843] should_fail_ex+0x4b4/0x5b0 [ 1195.822139] should_failslab+0x9/0x20 [ 1195.822417] __kmem_cache_alloc_node+0x5b/0x310 [ 1195.822754] ? ext4_find_extent+0xa41/0xd30 [ 1195.823069] ? ext4_find_extent+0xa41/0xd30 [ 1195.823382] __kmalloc+0x4a/0x160 [ 1195.823636] ext4_find_extent+0xa41/0xd30 [ 1195.823935] ? ext4_ext_map_blocks+0x14c/0x5970 [ 1195.824275] ext4_ext_map_blocks+0x1c7/0x5970 [ 1195.824604] ? __lock_acquire+0x1936/0x63b0 [ 1195.824928] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1195.825265] ? lock_acquire+0x19a/0x4c0 [ 1195.825550] ? find_held_lock+0x2c/0x110 [ 1195.825854] ? __down_read_common+0x86b/0x11e0 [ 1195.826186] ? lock_acquire+0x19a/0x4c0 [ 1195.826477] ? ext4_da_get_block_prep+0x5ca/0x1180 [ 1195.826838] ? __pfx___down_read_common+0x10/0x10 [ 1195.827184] ? __pfx_lock_acquire+0x10/0x10 [ 1195.827490] ? percpu_counter_add_batch+0xc8/0x180 [ 1195.827837] ? lock_is_held_type+0x9f/0x120 [ 1195.828166] ext4_da_get_block_prep+0xcbb/0x1180 [ 1195.828519] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1195.828897] ? __pfx_lock_release+0x10/0x10 [ 1195.829195] ? create_empty_buffers+0x300/0xa60 [ 1195.829534] ? do_raw_spin_unlock+0x53/0x220 [ 1195.829854] __block_write_begin_int+0x380/0x13d0 [ 1195.830200] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1195.830580] ? __pfx___block_write_begin_int+0x10/0x10 [ 1195.830952] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1195.831382] ext4_da_write_begin+0x357/0x8e0 [ 1195.831705] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1195.832060] generic_perform_write+0x25a/0x580 [ 1195.832401] ? __pfx_generic_perform_write+0x10/0x10 [ 1195.832772] ? __pfx_file_modified_flags+0x10/0x10 [ 1195.833134] ext4_buffered_write_iter+0x164/0x460 [ 1195.833473] ext4_file_write_iter+0x3ff/0x1950 [ 1195.833827] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1195.834190] ? lock_is_held_type+0x9f/0x120 [ 1195.834508] do_iter_readv_writev+0x211/0x3c0 [ 1195.834843] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1195.835198] ? avc_policy_seqno+0x9/0x20 [ 1195.835498] ? security_file_permission+0xb5/0xe0 [ 1195.835853] do_iter_write+0x189/0x7e0 [ 1195.836143] vfs_writev+0x1ae/0x660 [ 1195.836413] ? __pfx_vfs_writev+0x10/0x10 [ 1195.836796] ? __fget_files+0x24e/0x480 [ 1195.837086] ? lock_release+0x1e3/0x680 [ 1195.837386] ? __fget_files+0x270/0x480 [ 1195.837682] __x64_sys_pwritev+0x233/0x310 [ 1195.838007] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1195.838357] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1195.838739] do_syscall_64+0x3f/0x90 [ 1195.839018] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1195.839392] RIP: 0033:0x7f92c35cab19 [ 1195.839660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.840898] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1195.841422] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1195.841926] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1195.842410] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.842910] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 1195.843403] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1195.843914] [ 1195.854580] syz-executor.6: attempt to access beyond end of device [ 1195.854580] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 9) [ 1195.876764] 9pnet_fd: Insufficient options for proto=fd [ 1195.880099] loop5: detected capacity change from 0 to 16383 [ 1195.889109] 9pnet_fd: Insufficient options for proto=fd [ 1195.907162] loop5: detected capacity change from 0 to 16383 [ 1195.908216] syz-executor.3: attempt to access beyond end of device [ 1195.908216] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1195.911306] loop6: detected capacity change from 0 to 40 [ 1195.936210] syz-executor.6: attempt to access beyond end of device [ 1195.936210] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 7) 19:05:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x908084, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@access_user}], [{@appraise}, {@appraise}]}}) 19:05:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:05:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 10) 19:05:04 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:04 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 6) [ 1196.014322] loop3: detected capacity change from 0 to 40 [ 1196.020423] loop6: detected capacity change from 0 to 40 [ 1196.031409] syz-executor.3: attempt to access beyond end of device [ 1196.031409] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1196.037083] syz-executor.6: attempt to access beyond end of device [ 1196.037083] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 11) 19:05:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 7) 19:05:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x7f, 0x7ba1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "96f13583b711ca5be4de1fd7cc4763788d642c9fe1a60a066eb297145f9a10a9193becff74f73c0693b41e4a7667ff128ddcb3985209db46bbf34965bc3ce2dae551bb4c4a5f0e47a687afc03148aae85282f3e6bd71840b088359f3cef9d90151a429eaf34a060f8e620cceb7694bda58e4d20101b0a94b7471ff5a11dc074b135e5712ed838c77cd2793deeafc8dab0b8f6da0f631b75a082b2a24e44b68bfbb0e0e96456088d8f098420cd62f5decf6b9d2ac9c018f16e6409e1be980f0634469786888f9618391320c61a6ba0cf3507d2b5f1d8ba7ffd82b1d1a464d54a600760b2a122357482fcb237a2ca1ebceb4ae5dc8905f877c66841ab626c77dd1", "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"}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r3, r4, 0x0, 0x2) openat$cgroup_devices(r4, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:17 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 8) 19:05:17 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:05:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="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"]) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) [ 1208.100234] FAULT_INJECTION: forcing a failure. [ 1208.100234] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.101367] CPU: 0 PID: 7696 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1208.101922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1208.102461] Call Trace: [ 1208.102642] [ 1208.102819] dump_stack_lvl+0xc1/0xf0 [ 1208.103099] should_fail_ex+0x4b4/0x5b0 [ 1208.103382] ? __es_insert_extent+0x3a9/0x12f0 [ 1208.103706] should_failslab+0x9/0x20 [ 1208.103975] kmem_cache_alloc+0x5a/0x390 [ 1208.104267] __es_insert_extent+0x3a9/0x12f0 [ 1208.104582] ? do_raw_write_lock+0x11e/0x3b0 [ 1208.104891] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1208.105237] ext4_es_insert_extent+0x2db/0xb30 [ 1208.105563] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1208.105932] ? __pfx_lock_release+0x10/0x10 [ 1208.106224] ? kasan_set_track+0x25/0x30 [ 1208.106516] ? __pfx_ext4_es_is_delayed+0x10/0x10 [ 1208.106847] ? __es_find_extent_range+0x197/0x4b0 [ 1208.107186] ? do_raw_read_unlock+0x44/0xe0 [ 1208.107492] ext4_ext_map_blocks+0x18e9/0x5970 [ 1208.107894] ? __lock_acquire+0x1936/0x63b0 [ 1208.108272] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1208.108689] ? lock_acquire+0x19a/0x4c0 [ 1208.108962] ? find_held_lock+0x2c/0x110 [ 1208.109249] ? __down_read_common+0x86b/0x11e0 [ 1208.109573] ? lock_acquire+0x19a/0x4c0 [ 1208.109838] ? ext4_da_get_block_prep+0x5ca/0x1180 [ 1208.110189] ? __pfx___down_read_common+0x10/0x10 [ 1208.110522] ? __pfx_lock_acquire+0x10/0x10 [ 1208.110814] ? percpu_counter_add_batch+0xc8/0x180 [ 1208.111141] ? lock_is_held_type+0x9f/0x120 [ 1208.111451] ext4_da_get_block_prep+0xcbb/0x1180 [ 1208.111790] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1208.112147] ? __pfx_lock_release+0x10/0x10 [ 1208.112451] ? create_empty_buffers+0x300/0xa60 [ 1208.112773] ? do_raw_spin_unlock+0x53/0x220 [ 1208.113089] __block_write_begin_int+0x380/0x13d0 [ 1208.113428] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1208.113793] ? __pfx___block_write_begin_int+0x10/0x10 [ 1208.114151] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1208.114564] ext4_da_write_begin+0x357/0x8e0 [ 1208.114883] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1208.115230] generic_perform_write+0x25a/0x580 [ 1208.115571] ? __pfx_generic_perform_write+0x10/0x10 [ 1208.115925] ? __pfx_file_modified_flags+0x10/0x10 [ 1208.116281] ext4_buffered_write_iter+0x164/0x460 [ 1208.116627] ext4_file_write_iter+0x3ff/0x1950 [ 1208.116954] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1208.117306] ? lock_is_held_type+0x9f/0x120 [ 1208.117617] do_iter_readv_writev+0x211/0x3c0 [ 1208.117948] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1208.118290] ? avc_policy_seqno+0x9/0x20 [ 1208.118582] ? security_file_permission+0xb5/0xe0 [ 1208.118921] do_iter_write+0x189/0x7e0 [ 1208.119205] vfs_writev+0x1ae/0x660 [ 1208.119465] ? __pfx_vfs_writev+0x10/0x10 [ 1208.119748] ? __fget_files+0x24e/0x480 [ 1208.120024] ? lock_release+0x1e3/0x680 [ 1208.120316] ? __fget_files+0x270/0x480 [ 1208.120606] __x64_sys_pwritev+0x233/0x310 [ 1208.120911] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1208.121248] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1208.121623] do_syscall_64+0x3f/0x90 [ 1208.121896] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1208.122254] RIP: 0033:0x7f92c35cab19 [ 1208.122508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.123674] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1208.124171] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1208.124635] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1208.125102] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1208.125571] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 1208.126047] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1208.126533] [ 1208.131211] loop3: detected capacity change from 0 to 40 [ 1208.139398] 9pnet_fd: Insufficient options for proto=fd [ 1208.141178] 9pnet_fd: Insufficient options for proto=fd [ 1208.151834] syz-executor.3: attempt to access beyond end of device [ 1208.151834] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1208.153030] loop6: detected capacity change from 0 to 40 19:05:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:05:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 8) 19:05:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2cf2"]) [ 1208.231908] FAULT_INJECTION: forcing a failure. [ 1208.231908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1208.233531] CPU: 1 PID: 7704 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1208.234598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1208.235642] Call Trace: [ 1208.235982] [ 1208.236290] dump_stack_lvl+0xc1/0xf0 [ 1208.236901] should_fail_ex+0x4b4/0x5b0 [ 1208.237622] prepare_alloc_pages+0x178/0x500 [ 1208.238445] __alloc_pages+0x149/0x480 [ 1208.239151] ? lock_acquire+0x19a/0x4c0 [ 1208.239861] ? __pfx___alloc_pages+0x10/0x10 [ 1208.240651] ? lock_release+0x1e3/0x680 [ 1208.241256] ? xas_start+0x14e/0x710 [ 1208.241810] alloc_pages+0x1a0/0x260 [ 1208.242339] filemap_alloc_folio+0x374/0x410 [ 1208.242959] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1208.243642] ? mark_held_locks+0x9e/0xe0 [ 1208.244207] __filemap_get_folio+0x285/0x8d0 [ 1208.244822] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1208.245554] pagecache_get_page+0x2e/0x120 [ 1208.246150] ? __pfx_fat_get_block+0x10/0x10 [ 1208.246755] block_write_begin+0x35/0x450 [ 1208.247324] cont_write_begin+0x4fe/0x700 [ 1208.247900] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1208.248764] ? __pfx_fat_get_block+0x10/0x10 [ 1208.249352] ? __pfx_cont_write_begin+0x10/0x10 [ 1208.250012] ? __mark_inode_dirty+0x249/0xc10 [ 1208.250644] ? generic_write_end+0x1fe/0x3d0 [ 1208.251238] fat_write_begin+0x89/0x180 [ 1208.251782] ? __pfx_fat_get_block+0x10/0x10 [ 1208.252377] cont_write_begin+0x2fc/0x700 [ 1208.252975] ? __pfx_fat_get_block+0x10/0x10 [ 1208.253575] ? __pfx_cont_write_begin+0x10/0x10 [ 1208.254216] ? lock_release+0x1e3/0x680 [ 1208.254758] ? __pfx_fault_in_readable+0x10/0x10 [ 1208.255393] fat_write_begin+0x89/0x180 [ 1208.255926] ? __pfx_fat_get_block+0x10/0x10 [ 1208.256536] generic_perform_write+0x25a/0x580 [ 1208.257190] ? __pfx_generic_perform_write+0x10/0x10 [ 1208.257877] ? __pfx_fat_update_time+0x10/0x10 [ 1208.258469] ? __pfx_file_update_time+0x10/0x10 [ 1208.259122] ? generic_write_checks+0x2c0/0x400 [ 1208.259785] __generic_file_write_iter+0x308/0x4b0 [ 1208.260444] generic_file_write_iter+0xe7/0x350 [ 1208.261098] do_iter_readv_writev+0x211/0x3c0 [ 1208.261724] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1208.262380] ? avc_policy_seqno+0x9/0x20 [ 1208.262966] ? security_file_permission+0xb5/0xe0 [ 1208.263634] do_iter_write+0x189/0x7e0 [ 1208.264173] vfs_writev+0x1ae/0x660 [ 1208.264701] ? __pfx_vfs_writev+0x10/0x10 [ 1208.265230] ? __fget_files+0x24e/0x480 [ 1208.265776] ? lock_release+0x1e3/0x680 [ 1208.266332] ? __fget_files+0x270/0x480 [ 1208.266895] __x64_sys_pwritev+0x233/0x310 [ 1208.267456] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1208.268113] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1208.268846] do_syscall_64+0x3f/0x90 [ 1208.269372] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1208.270139] RIP: 0033:0x7fb6935b7b19 [ 1208.270684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.273167] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1208.274226] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1208.275208] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1208.276192] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1208.277174] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1208.278154] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1208.279147] 19:05:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) 19:05:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd.rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 19:05:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 9) 19:05:17 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1208.343196] loop3: detected capacity change from 0 to 40 19:05:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 10) [ 1208.385437] syz-executor.3: attempt to access beyond end of device [ 1208.385437] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1208.450253] FAULT_INJECTION: forcing a failure. [ 1208.450253] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.451204] CPU: 0 PID: 7728 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1208.451766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1208.452334] Call Trace: [ 1208.452519] [ 1208.452686] dump_stack_lvl+0xc1/0xf0 [ 1208.452980] should_fail_ex+0x4b4/0x5b0 [ 1208.453282] ? __es_insert_extent+0x3a9/0x12f0 [ 1208.453618] should_failslab+0x9/0x20 [ 1208.453901] kmem_cache_alloc+0x5a/0x390 [ 1208.454205] __es_insert_extent+0x3a9/0x12f0 [ 1208.454538] ? __es_tree_search.isra.0+0x1af/0x220 [ 1208.454897] __es_remove_extent+0x9f5/0x15a0 [ 1208.455234] ? __pfx___es_remove_extent+0x10/0x10 [ 1208.455591] ? __pfx_lock_acquire+0x10/0x10 [ 1208.455906] ? do_raw_spin_unlock+0x53/0x220 [ 1208.456230] ? do_raw_write_lock+0x11e/0x3b0 [ 1208.456558] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1208.456897] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1208.457332] ext4_es_insert_delayed_block+0x1f8/0x470 [ 1208.457716] ? __pfx_ext4_es_insert_delayed_block+0x10/0x10 [ 1208.458138] ? percpu_counter_add_batch+0xc8/0x180 [ 1208.458500] ? do_raw_spin_unlock+0x53/0x220 [ 1208.458825] ? _raw_spin_unlock+0x1e/0x40 [ 1208.459134] ? ext4_da_reserve_space+0xf8/0x3d0 [ 1208.459487] ext4_da_get_block_prep+0xc1e/0x1180 [ 1208.459842] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1208.460222] ? __pfx_lock_release+0x10/0x10 [ 1208.460540] ? create_empty_buffers+0x300/0xa60 [ 1208.460887] ? do_raw_spin_unlock+0x53/0x220 [ 1208.461214] __block_write_begin_int+0x380/0x13d0 [ 1208.461571] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1208.461971] ? __pfx___block_write_begin_int+0x10/0x10 [ 1208.462354] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1208.462787] ext4_da_write_begin+0x357/0x8e0 [ 1208.463110] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1208.463476] generic_perform_write+0x25a/0x580 [ 1208.463834] ? __pfx_generic_perform_write+0x10/0x10 [ 1208.464209] ? __pfx_file_modified_flags+0x10/0x10 [ 1208.464587] ext4_buffered_write_iter+0x164/0x460 [ 1208.464950] ext4_file_write_iter+0x3ff/0x1950 [ 1208.465304] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1208.465675] ? lock_is_held_type+0x9f/0x120 [ 1208.466013] do_iter_readv_writev+0x211/0x3c0 [ 1208.466349] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1208.466707] ? avc_policy_seqno+0x9/0x20 [ 1208.467019] ? security_file_permission+0xb5/0xe0 [ 1208.467383] do_iter_write+0x189/0x7e0 [ 1208.467686] vfs_writev+0x1ae/0x660 [ 1208.467963] ? __pfx_vfs_writev+0x10/0x10 [ 1208.468273] ? __fget_files+0x24e/0x480 [ 1208.468571] ? lock_release+0x1e3/0x680 [ 1208.468876] ? __fget_files+0x270/0x480 [ 1208.469181] __x64_sys_pwritev+0x233/0x310 [ 1208.469498] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1208.469850] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1208.470265] do_syscall_64+0x3f/0x90 [ 1208.470554] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1208.470930] RIP: 0033:0x7f92c35cab19 [ 1208.471197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.472445] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1208.472967] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1208.473463] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1208.473977] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1208.474470] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1208.474961] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1208.475470] 19:05:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 12) 19:05:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:05:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 9) [ 1208.546937] loop3: detected capacity change from 0 to 40 [ 1208.564525] 9pnet: Could not find request transport: fd.rfdno=0x0000000000000003 [ 1208.576566] syz-executor.3: attempt to access beyond end of device [ 1208.576566] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 11) [ 1208.616698] 9pnet: Could not find request transport: fd.rfdno=0x0000000000000003 [ 1208.620771] loop6: detected capacity change from 0 to 40 19:05:17 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000300)={{0x0, 0x4, 0x6, 0xfffffffffffffffa, 0xffffffffffffffc0, 0x3, 0x14, 0x80000000, 0xfffffbff, 0x100, 0x10000, 0xfffffffffffffffa, 0x111, 0xb04, 0x2}}) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="e5559f289b9a83b0791b08a305e6df57adb2b1e94318968160a9876dedb7bef58f2e6a713fb080732268b20ba9cfdf27a992e240b01cd60bbc03213e0603b0deb22d126019836b1dfca45a87d5d001bb665d837503fb451d81b7cad04b7f17fabab8e57189cbac9aafa517f72e746d5cda32821366f0adb606c5da87a7fe39b4ed30426a209dbd8c78eeb85524d8985388a4df62", 0x94}, {&(0x7f0000001300)="4028066c214b57ce62e34aa504247c977af6a472fd3167a09fd7370b9cd2d89c313bdef678ac4f0e99b7bcce3063533dfae311ff4f04007b1f10895b1738946b1a255fb135c3c30fa4b49b25b21017722108450fffe3e87b778f70dd9267d9bfb70f1701495c96f2a1d06f85a5c02c08c356208422b6a2c700c7f1fac3045a7bf4dc5dcafc4c47d7", 0x88}, {&(0x7f00000013c0)="53d41bda958653b9c527008e6cb0b698c83ab0b0f9f35491dd717accbcb7c32a1883de9be4eee3f9fb90472c43a3848fca0c9301e74a193e32e4daf8c6817c1e86a09ef3300467397a9d691bbf25", 0x4e}], 0x3, 0x5) fremovexattr(0xffffffffffffffff, 0x0) r3 = fork() wait4(r3, &(0x7f0000000240), 0x8, 0x0) tgkill(r3, r3, 0x6) sched_setscheduler(r3, 0x0, &(0x7f0000000000)=0x7f) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x3f, 0x1, 0x1f, 0x7, 0x0, 0x0, 0x29008, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000001440), 0x2}, 0x600, 0x7, 0x9, 0x7, 0x2c, 0x7, 0x0, 0x0, 0xfff, 0x0, 0x1}, r3, 0x0, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:17 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 10) [ 1208.655784] syz-executor.6: attempt to access beyond end of device [ 1208.655784] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1208.709799] loop3: detected capacity change from 0 to 40 [ 1208.746776] syz-executor.3: attempt to access beyond end of device [ 1208.746776] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) 19:05:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r0, 0x9b) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:31 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:05:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 12) 19:05:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 13) 19:05:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 11) [ 1222.655503] loop3: detected capacity change from 0 to 40 19:05:31 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = epoll_create(0x9) setresuid(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x2802880, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@version_9p2000}], [{@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'rfdno'}}, {@smackfsroot={'smackfsroot', 0x3d, 'rfdno'}}, {@fowner_gt}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, ',()]\''}}]}}) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',w\x00\x00no=', @ANYRESHEX=r0, @ANYBLOB="0100"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) setreuid(0xffffffffffffffff, r2) [ 1222.667329] loop6: detected capacity change from 0 to 40 [ 1222.680320] FAULT_INJECTION: forcing a failure. [ 1222.680320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1222.681690] CPU: 1 PID: 7761 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1222.682406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1222.683120] Call Trace: [ 1222.683357] [ 1222.683569] dump_stack_lvl+0xc1/0xf0 [ 1222.683937] should_fail_ex+0x4b4/0x5b0 [ 1222.684315] prepare_alloc_pages+0x178/0x500 [ 1222.684743] __alloc_pages+0x149/0x480 [ 1222.685108] ? lock_acquire+0x19a/0x4c0 [ 1222.685477] ? __pfx___alloc_pages+0x10/0x10 [ 1222.685887] ? lock_release+0x1e3/0x680 [ 1222.686259] ? xas_start+0x14e/0x710 [ 1222.686619] alloc_pages+0x1a0/0x260 [ 1222.686979] filemap_alloc_folio+0x374/0x410 [ 1222.687406] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1222.687859] ? lock_acquire+0x19a/0x4c0 [ 1222.688232] ? find_held_lock+0x2c/0x110 [ 1222.688622] ? folio_memcg_lock+0xf9/0x4b0 [ 1222.689034] __filemap_get_folio+0x285/0x8d0 [ 1222.689444] ? folio_memcg_unlock+0xbd/0x240 [ 1222.689859] pagecache_get_page+0x2e/0x120 [ 1222.690274] ? __pfx_fat_get_block+0x10/0x10 [ 1222.690681] block_write_begin+0x35/0x450 [ 1222.691074] cont_write_begin+0x4fe/0x700 [ 1222.691466] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1222.692042] ? __pfx_fat_get_block+0x10/0x10 [ 1222.692456] ? __pfx_cont_write_begin+0x10/0x10 [ 1222.692883] ? __mark_inode_dirty+0x249/0xc10 [ 1222.693312] ? generic_write_end+0x1fe/0x3d0 [ 1222.693727] fat_write_begin+0x89/0x180 [ 1222.694101] ? __pfx_fat_get_block+0x10/0x10 [ 1222.694518] cont_write_begin+0x2fc/0x700 [ 1222.694913] ? __pfx_fat_get_block+0x10/0x10 [ 1222.695319] ? __pfx_cont_write_begin+0x10/0x10 [ 1222.695757] ? lock_release+0x1e3/0x680 [ 1222.696132] ? __pfx_fault_in_readable+0x10/0x10 [ 1222.696580] fat_write_begin+0x89/0x180 [ 1222.696951] ? __pfx_fat_get_block+0x10/0x10 [ 1222.697373] generic_perform_write+0x25a/0x580 [ 1222.697817] ? __pfx_generic_perform_write+0x10/0x10 [ 1222.698312] ? __pfx_fat_update_time+0x10/0x10 [ 1222.698737] ? __pfx_file_update_time+0x10/0x10 [ 1222.699186] ? generic_write_checks+0x2c0/0x400 [ 1222.699625] __generic_file_write_iter+0x308/0x4b0 [ 1222.700087] generic_file_write_iter+0xe7/0x350 [ 1222.700525] do_iter_readv_writev+0x211/0x3c0 [ 1222.700964] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1222.701426] ? avc_policy_seqno+0x9/0x20 [ 1222.701824] ? security_file_permission+0xb5/0xe0 [ 1222.702292] do_iter_write+0x189/0x7e0 [ 1222.702680] vfs_writev+0x1ae/0x660 [ 1222.703031] ? __pfx_vfs_writev+0x10/0x10 [ 1222.703438] ? __fget_files+0x24e/0x480 [ 1222.703810] ? lock_release+0x1e3/0x680 [ 1222.704205] ? __fget_files+0x270/0x480 [ 1222.704586] __x64_sys_pwritev+0x233/0x310 [ 1222.704999] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1222.705451] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1222.705949] do_syscall_64+0x3f/0x90 [ 1222.706317] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1222.706811] RIP: 0033:0x7f4320699b19 [ 1222.707154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1222.708767] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1222.709441] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1222.710098] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1222.710731] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1222.711367] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1222.711996] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1222.712637] [ 1222.716182] syz-executor.6: attempt to access beyond end of device [ 1222.716182] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1222.717780] FAULT_INJECTION: forcing a failure. [ 1222.717780] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.718878] CPU: 1 PID: 7762 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1222.719665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1222.720402] Call Trace: [ 1222.720644] [ 1222.720860] dump_stack_lvl+0xc1/0xf0 [ 1222.721241] should_fail_ex+0x4b4/0x5b0 [ 1222.721624] ? __es_insert_extent+0x3a9/0x12f0 [ 1222.722063] should_failslab+0x9/0x20 [ 1222.722437] kmem_cache_alloc+0x5a/0x390 [ 1222.722829] __es_insert_extent+0x3a9/0x12f0 [ 1222.723264] ? __es_tree_search.isra.0+0x1af/0x220 [ 1222.723741] __es_remove_extent+0x9f5/0x15a0 [ 1222.724182] ? __pfx___es_remove_extent+0x10/0x10 [ 1222.724642] ? __pfx_lock_acquire+0x10/0x10 [ 1222.725046] ? do_raw_spin_unlock+0x53/0x220 [ 1222.725473] ? do_raw_write_lock+0x11e/0x3b0 [ 1222.725895] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1222.726360] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1222.726916] ext4_es_insert_delayed_block+0x1f8/0x470 [ 1222.727408] ? __pfx_ext4_es_insert_delayed_block+0x10/0x10 [ 1222.727937] ? percpu_counter_add_batch+0xc8/0x180 [ 1222.728398] ? do_raw_spin_unlock+0x53/0x220 [ 1222.728820] ? _raw_spin_unlock+0x1e/0x40 [ 1222.729212] ? ext4_da_reserve_space+0xf8/0x3d0 [ 1222.729659] ext4_da_get_block_prep+0xc1e/0x1180 [ 1222.730131] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1222.730626] ? __pfx_lock_release+0x10/0x10 [ 1222.731035] ? create_empty_buffers+0x300/0xa60 [ 1222.731476] ? do_raw_spin_unlock+0x53/0x220 [ 1222.731904] __block_write_begin_int+0x380/0x13d0 [ 1222.732362] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1222.732859] ? __pfx___block_write_begin_int+0x10/0x10 [ 1222.733355] ext4_da_write_begin+0x357/0x8e0 [ 1222.733782] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1222.734260] generic_perform_write+0x25a/0x580 [ 1222.734709] ? __pfx_generic_perform_write+0x10/0x10 [ 1222.735190] ? __pfx_file_modified_flags+0x10/0x10 [ 1222.735671] ext4_buffered_write_iter+0x164/0x460 [ 1222.736138] ext4_file_write_iter+0x3ff/0x1950 [ 1222.736591] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1222.737075] ? lock_is_held_type+0x9f/0x120 [ 1222.737494] do_iter_readv_writev+0x211/0x3c0 [ 1222.738002] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1222.738484] ? avc_policy_seqno+0x9/0x20 [ 1222.738881] ? security_file_permission+0xb5/0xe0 [ 1222.739345] do_iter_write+0x189/0x7e0 [ 1222.739733] vfs_writev+0x1ae/0x660 [ 1222.740088] ? __pfx_vfs_writev+0x10/0x10 [ 1222.740484] ? __fget_files+0x24e/0x480 [ 1222.740866] ? lock_release+0x1e3/0x680 [ 1222.741256] ? __fget_files+0x270/0x480 [ 1222.741647] __x64_sys_pwritev+0x233/0x310 [ 1222.742052] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1222.742525] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1222.743027] do_syscall_64+0x3f/0x90 [ 1222.743400] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1222.743892] RIP: 0033:0x7f92c35cab19 [ 1222.744256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1222.745887] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1222.746595] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1222.747234] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1222.747879] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1222.748521] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1222.749165] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1222.749824] 19:05:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[]) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='gfs2\x00', 0x10002, &(0x7f0000000180)='\x00') 19:05:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 14) [ 1236.440139] loop6: detected capacity change from 0 to 40 19:05:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 13) 19:05:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r3, 0xffffffff, 0x0, 0x7fff}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:45 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000300)={{0x0, 0x4, 0x6, 0xfffffffffffffffa, 0xffffffffffffffc0, 0x3, 0x14, 0x80000000, 0xfffffbff, 0x100, 0x10000, 0xfffffffffffffffa, 0x111, 0xb04, 0x2}}) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="e5559f289b9a83b0791b08a305e6df57adb2b1e94318968160a9876dedb7bef58f2e6a713fb080732268b20ba9cfdf27a992e240b01cd60bbc03213e0603b0deb22d126019836b1dfca45a87d5d001bb665d837503fb451d81b7cad04b7f17fabab8e57189cbac9aafa517f72e746d5cda32821366f0adb606c5da87a7fe39b4ed30426a209dbd8c78eeb85524d8985388a4df62", 0x94}, {&(0x7f0000001300)="4028066c214b57ce62e34aa504247c977af6a472fd3167a09fd7370b9cd2d89c313bdef678ac4f0e99b7bcce3063533dfae311ff4f04007b1f10895b1738946b1a255fb135c3c30fa4b49b25b21017722108450fffe3e87b778f70dd9267d9bfb70f1701495c96f2a1d06f85a5c02c08c356208422b6a2c700c7f1fac3045a7bf4dc5dcafc4c47d7", 0x88}, {&(0x7f00000013c0)="53d41bda958653b9c527008e6cb0b698c83ab0b0f9f35491dd717accbcb7c32a1883de9be4eee3f9fb90472c43a3848fca0c9301e74a193e32e4daf8c6817c1e86a09ef3300467397a9d691bbf25", 0x4e}], 0x3, 0x5) fremovexattr(0xffffffffffffffff, 0x0) r3 = fork() wait4(r3, &(0x7f0000000240), 0x8, 0x0) tgkill(r3, r3, 0x6) sched_setscheduler(r3, 0x0, &(0x7f0000000000)=0x7f) perf_event_open(&(0x7f0000001480)={0x0, 0x80, 0x3f, 0x1, 0x1f, 0x7, 0x0, 0x0, 0x29008, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000001440), 0x2}, 0x600, 0x7, 0x9, 0x7, 0x2c, 0x7, 0x0, 0x0, 0xfff, 0x0, 0x1}, r3, 0x0, r0, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 19:05:45 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 12) 19:05:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1236.487175] loop3: detected capacity change from 0 to 40 [ 1236.490306] syz-executor.6: attempt to access beyond end of device [ 1236.490306] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 14) 19:05:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 15) 19:05:45 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r0, r1, 0x0, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000001c0)=0x5) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r3, r4, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x8000000000001, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000040)) 19:05:45 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1236.609492] syz-executor.3: attempt to access beyond end of device [ 1236.609492] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x7f, 0x7ba1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "f30c5446b27f1bb78e94c1ef441fc1f90a6c303fb4669280dc42ff407c67c68e1a0c89396508a002671f415c498607d967deb9e8bf8ba9e46b2e471f9618bb7a933d92b687847c44494bab0896a3d2728dbdb4cbef597a17c786586d0db0825ce6ad5cf6e6978b914338c2c22067a54518a5173369c1bf6079423408a801416da473f5e159fcfb7f1c065db0a4402317905de2e7869cb015266b13e06ac7f730dde0f541fd7ca8bde3832b1ff1316ea45560eb3827b69c530f2d0c9ddc5402a82660dff8cf2966e813be67bbcd8c906cd5ffe28fc3d877de3a54e177035b096cae5b0a7519f2b58ac337ad49d06565878ca9235e7a59ef08821dcd4713ab572073fc8a5e3d1f394a6a5340007216e87f2bd1e7fe536ed2e4a92ee3d6d2a06f4ee0b820bbd56d6d7de77b7eec5686de274289976057e769db5aeeb44caceade22f7c04e24a10c472f2cb96cf6c55023d30b32702b7efa6a5a40060ab49f88d855299e880fafce7951e40ee9d1fa71dd223e8cb86364982ea0f1dd496cdb5b54a5ba10e21ec61de00ad6e142479585b4dac0ae4e3b9c4d46603c59e93895f5fc6f62f06b2a8d0e4c71466e16fb33ecbbddee4e65014980d59c8bdd5d2c71955a5998a067fac789c36b0b7978e6f6c02603aad6092b6d4128c1f9f0c5b3ce2ce3a259588b5a5cea6c56c936e28d8392c9aa62e012647d451dd96f0fa06c04df73fccced31fb4f139bfcdfb17bb93ecd7d03bd748ba1447ebe5434ea43a445db8e510825336a8f857a348a633bd72650cbcf6c6c601f93018b88c334d024eccc91093a65e1e090230ae408fcd982005b48a7b35647ca8a2626fe56f3373e250b2216df607922aa9ab1f9ef02f64fd46081e3c159de3c76414e5593e34f6538c100f82ec7c61e6b059b95bf323a92f2e335bb8373f9a1aa70014b391e01d96051ff48175264d6c019918fabe8627fdb6868892c16bc5b83072513f79fdc23acb648a28b4a454b98d51218d44ea07d9416db73feb0d3d0bc87ea3cae3f8221e7372ecb779fb7632868c145c757a06af4f14474003c4011f60c0092c2dc174c557ac2a68b58220fe02502005d9a2e919e7384c95cb82559b1ec66ab29eb4f570e4076a4649c6c5bcaab67d2139ba51131d5486450ebb4f6430664b5886cdb3e3230bc7a2a76e17912498c4fbf717da18a52541eb25dc45c397f2c8d02d543ed2d577bbba33eb585eac470905197f4a9540d8b4de8c65ecc907c7e5b27d3d8c8ef43ae619ce215b3aae4be36d111d0a5eb17e94282c6281d05d5e0f684747ee77dd1052c7bd2979aadf1a02d05a614c72a83250b7a877ee3d02a74d295b69c0107b4bd9128b5256b2afc590a21e070d6958ad8872f43aeaae3c67603f61dba7bd9e8bb9583e1ce9aed9d91c11ef18618a69b11ef79c6db54b16ec8fd9eb1903660f060a6656c66ce20437e4601d9d84a381157b0f4f0596b90b5c18ddebac7a027f9cc1d69c3b3ede374577125a2d145183543207a6dc8d99cf36c61c2d94e743d1478a2bddc4510e0b05d2deb6afa5ed1fbdb1f5b3dda5ebe2f23fb5e60de8280fe4e200be459136fd57c0b3f7d8f81baab5b38302edffa04a919a47a943b3985e25e94731b31ed510bb109be63aaff19ba121acdfc02a9b4356c826ba136bc727d2023a763a6b84110bae8f25df67f42c679b983c39d22c0d3eff6213de43ad34c99056bf3aa287d822363d48b05706188987feb06f19cad7952ecee7046a9989583074ef56119af7f5c353631b0ad5f0ea43f097d82790aefe9cadf1fcae66aa6e32842de9c9c6e43fd74e501306c9ec87a8dbc21c8ead6455676e5ddfd850081b3e2fb393bf241a2ce96db7e385bb7036ccbcd3c947074cdb106b1a7c4b97c4701bbc032d1f0425d3834b862444366828978defdee3c1de0421f0902b650d894a166777d4dbb84c03080958df17cf505c7aad9313d0b00d680a6f78ed49dc1314fbfd59d89aaa56b7b2c3f20a56c0ecd47af7f271175f4b6c1397699a2dd2fd5353d90af7614f240842cf3e942c10fc69bd3816cc0e0386d9dbcbe354b24d7bd821cf7394887e63064408d15e638475f9982cbcac03ba5fbdd4b36ac54f5b410ea346100ba9c816caf24febe1631c181d805ce771367ef8f75e0a9b5182e7f653b2012a117306bab1def70f4e6f46a8fb15eb0c0c16dc6e215932a810238215b5aa342e28df2e72f50785756b4920fd908e226a9e31fb9b8a6c4b496fa11437299f0ac9cd7820d058ecff738c06a548d367a819c87825e0b5ad7e54998a433c728eee545cc0e7f9c2744f9e24def6230459656d1e9de71464e0e3b5d2d1975c222306e8c1e21805748a548c9d3edd30551ca2d9d77269d12cc3d068e95e281876f048bc438f22551e3aca371f773d80af4907b6b0e3544153ce38cd16cc2bf5ee7a7b7da7f2fb5b479dc394db706d033f5b24bd7334c31ffd5ded5c94e6b1ba6f30d9efdb7124656059cafe1ab6db0c72ab83163a96fd1eeee1ac5357b88afe2a57f6974305477a978683ea0345bf4f81ebfe3afc3d8045ba13e2c552eba4003941d525be93fefea46e91f30f263c1b9da45aa347f3b6b391c3ee99d004d2893e057d888c3939f15eedcf665445920e7b2a26d2f15e271f7d06eefc11e2a1038b679591d38f6c55c7f40d816b5366dad55e510ad30a254d6120d22f6674d71151340cf92c32a813fdd2a8d73b8e41ce28def6d02fd92ee315df94d0c825034d4c012fdff8db983d64785a04ad1fb640a004e02790156d36871edaf5ac1d0087a706b0dc92692f67496d1707e4d61c88708c0d8f5e68006365a716b0eeb783720f2cb4fd581d8b8ac2c15ff7a355d3963557235af73acc8078f7b3651bedb43e504bb67a8789bb0561ae10407f78a4e4bb527eb2a5568c21566369d89c50c18761515f82c37aa09689c2f53128e7519da8660e713968e3acd357c957426a673abee3c4664d000a71b5d1bfcffcfc1cf0199aecfebefb32214f698910e93c3be5c07c444855f818d8fe64162d5b688bac29767391b8afed8dbefaac2da4ed692c75097c79ea017d1a44e6964d78977277af839eab3b27ce3270492c18785fc57b6d33a8c44840a987d0155320e77d7de6b4f41ae8582ebc4deae2cce38ef05c28df9e594ce8780f2faad6acffd4923004d10c73df6a798d94483d12e9d97c324eab8774df61666d74fdca33a3ffcbf7d88ea2068c6fb1fea84ea33a4945db7e4a967e0376da298feacb433ec2ec596e63775802675ddbcb1ec39a7b370cab7e836f26d026b5a0b1d3cf1a084548f953f0e2960ec2b7868aade4671f8a27eaa1b0ce8245e9f25dde54069e45d40e2d76d9e64209fefd3a2ef9636235077887ea475800323ff40675c9b7c3438c66988bcdc1ceb74075d63dc2ecd12969090f68c4edfe9c2235a7ae91ec40fdbb43e0f8f6c0dfacc46d90c51eee237076424b10a08d1d0c2ae465192d104faf705e0a6e409594169a226f60168ebf0165038870f95e4a95fe67b4748441e8643836e5db317720993c470db560507cf60374bbb39138ee059002128d7b66e1045e782b4a6b2da257a4a89059735492ab0bc8f31933e9ae81ff5807ff5320a8a7e7590c2c1e4f7695938c475016f9a648eaefecd1157a383494d08d33147beaa2501d2923ef1f6cb62e8eb604278ad5dae70cdc6b632d978366e043115d6f346eb2effb80d717e1dd4d14beee575bb9f361b1c25bc725acbc8188b84f909783a2b4802d7c9599d6c2d7968027cc3d21abefed382ffd1f21417abb266cb785e21252406a9d113afc7fd59b195471e9b5983025bb2bb7ea9535f9d478127af09df36d626f4b3a3b7a0bbb2616965886996098bc99f03ecce9dc6c923b385e8aa4ec6ccd9f249a7fc1ec4e9e5532337eee061925a012504af39a834db4280a56e6ca7e9ae7235314d78940b7d0450db493098cbe3d96a79ec666aff552182998a7b3828946d9ce37f496da1e1445da45ed8c26d7b534fbbc98b37e1b9b66faeda6a62d8d1ff1b221ee079f1e5e218b519ed47bdc4f67df66944c2794ec3af1e1ce89cab2f4b4fa052413f328defb5000a97da48e5e4617451b68b766a499a9aa8a8cefcb2025d32f38041a5d43d7032b02baaf5ffea0dbcc69fd88785853e6e63576f4d9412912832df4090145c4512e956c3a4cf22b5b9370e66223696d5b103f99a65d9c9511f9e4843333f36175dd25a57be55ca6933a6dba0fc19be04e2bda25d7214857c1fd742a5242cffe253fa40df56c366412990bf411f63ce72e747ca95a0a2ea6d32fe7c8082402d3062dc76d1cc9bb87a07021026db5c0fd554d640357971c7e3c3ba550991f5578a6e89a1cb70b0a402818cde30e8e929887b2ba25c31cb2e6ac1c55d50a8bd10bc777e3ba1ad930b13a90278e19a19bd9987c55ed4c9716aa8571ce38f4b7ee6f9f849cda52bdcc389ea897137bfb18321c08a880d6b0ba7c858deabee4feb6bb934ff3656ccc9c35900b53dce4a7906842fddd62c7c883ddc04872988c4e7c7feeccb12c73c144a456aa1684e44c129333858d485c35cdc9334d60cdfb2101c0c91513a15b68b953babeb6661ceb738409098fda259951f2406a0d35408fe9681d7fd7ba030f513566f34efed578af87740742065e5ff9579f0f08e18f3b5abed0d40caccf0535d6816865e19c80367dc3942134cf7c04e5c31a7bec28844c2983febdfccfe1875b4b161801f2c457b3f34bc4f6ea563f94bffa051c8153c0c61775c8c34b732f0321afb6d912bea3db52be425254f1fc83d602297835f9f6a99e2b75e2ab8a3dce494be86e2e46d0080847381f5399978a60834f61318040e2780994df688be5a6392e4168da7065b1a949e610e28cbe5e677e12e2eb42d91bb9e1c2493f1730633454849a2d78897e61bd468bdf78764eb98ace09adb3477293dd0331d6ba7be51e4ea62824afcabb6b43a1f36c7b8e8c82f2c2d0c350c286bf1bb42f3a144a3dbeba6785bd98d3d05e42e6cc93443863b894e747f01b3cf0b619738c43407b54fb1fe57b04f8a8b5df107db30a5b9a47d065fc99258ff1bc5ae9399d2a1c22a82020c48badc4649a555e14852e08395948bf406a44c2c27ce3a759ba6320ca423dcbee1702ce4aef3a842f12dd7a1a02231967cefd2591b9f92a1b5f2c1089acf3f704972e06e75be6f23ecd79c8086a09eeac717d83cf86f09263ff2a5dd9cfa32e764dffc418d8a5222f67fc1b7291c28f034be4ab8c2d399cf400ea234de8ee9efc3c94771c61881fcf1ee055c1b5d4f28d79520be81902fe8799499ba104f740ae3a04c5f5537b4c5de9e281270172f90d9b16eb6b6e0b5eb91ec008b11e97d6cfa78863b905748c8e8bf7cdf20a763142f"}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r3, r4, 0x0, 0x2) openat$cgroup_devices(r4, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 13) [ 1236.687805] FAULT_INJECTION: forcing a failure. [ 1236.687805] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.689434] CPU: 0 PID: 7819 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1236.690493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1236.691548] Call Trace: [ 1236.691889] [ 1236.692199] dump_stack_lvl+0xc1/0xf0 [ 1236.692736] should_fail_ex+0x4b4/0x5b0 [ 1236.693268] ? __es_insert_extent+0x3a9/0x12f0 [ 1236.693892] should_failslab+0x9/0x20 [ 1236.694432] kmem_cache_alloc+0x5a/0x390 [ 1236.695099] __es_insert_extent+0x3a9/0x12f0 [ 1236.695774] ext4_es_insert_delayed_block+0x298/0x470 [ 1236.696515] ? __pfx_ext4_es_insert_delayed_block+0x10/0x10 [ 1236.697292] ? percpu_counter_add_batch+0xc8/0x180 [ 1236.697958] ? do_raw_spin_unlock+0x53/0x220 [ 1236.698604] ? _raw_spin_unlock+0x1e/0x40 [ 1236.699188] ? ext4_da_reserve_space+0xf8/0x3d0 [ 1236.699842] ext4_da_get_block_prep+0xc1e/0x1180 [ 1236.700519] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1236.701231] ? __pfx_lock_release+0x10/0x10 [ 1236.701829] ? create_empty_buffers+0x300/0xa60 [ 1236.702497] ? do_raw_spin_unlock+0x53/0x220 [ 1236.703129] __block_write_begin_int+0x380/0x13d0 [ 1236.703774] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1236.704510] ? __pfx___block_write_begin_int+0x10/0x10 [ 1236.705184] ext4_da_write_begin+0x357/0x8e0 [ 1236.705807] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1236.706442] generic_perform_write+0x25a/0x580 [ 1236.707108] ? __pfx_generic_perform_write+0x10/0x10 [ 1236.707851] ? __pfx_file_modified_flags+0x10/0x10 [ 1236.708585] ext4_buffered_write_iter+0x164/0x460 [ 1236.709277] ext4_file_write_iter+0x3ff/0x1950 [ 1236.709947] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1236.710662] ? lock_is_held_type+0x9f/0x120 [ 1236.711274] do_iter_readv_writev+0x211/0x3c0 [ 1236.711917] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1236.712635] ? avc_policy_seqno+0x9/0x20 [ 1236.713220] ? security_file_permission+0xb5/0xe0 [ 1236.713901] do_iter_write+0x189/0x7e0 [ 1236.714478] vfs_writev+0x1ae/0x660 [ 1236.715002] ? __pfx_vfs_writev+0x10/0x10 [ 1236.715584] ? __fget_files+0x24e/0x480 [ 1236.716136] ? lock_release+0x1e3/0x680 [ 1236.716710] ? __fget_files+0x270/0x480 [ 1236.717281] __x64_sys_pwritev+0x233/0x310 [ 1236.717894] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1236.718585] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1236.719351] do_syscall_64+0x3f/0x90 [ 1236.719897] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1236.720606] RIP: 0033:0x7f92c35cab19 [ 1236.721118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1236.723520] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1236.724536] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1236.725507] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1236.726482] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1236.727432] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1236.728305] loop3: detected capacity change from 0 to 40 [ 1236.728339] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1236.729722] [ 1236.756599] loop6: detected capacity change from 0 to 40 [ 1236.763164] syz-executor.3: attempt to access beyond end of device [ 1236.763164] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1236.785536] syz-executor.6: attempt to access beyond end of device [ 1236.785536] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 14) 19:05:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r0, r1, 0x0, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x9, 0x8, 0x6, 0x0, 0x5, 0x10000, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0x8}, 0x14808, 0x3, 0x80, 0x4, 0x80000000, 0xc4f, 0xfff7, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r1, 0x9, r3, 0xa) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r5, &(0x7f0000000140)='./file1\x00', 0x400, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1248.947951] loop3: detected capacity change from 0 to 40 19:05:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0xfffffffffffffe8b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc40800, 0x81) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r4, r5, 0x0, 0x2) stat(&(0x7f0000001340)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1200000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_L}, {@noextend}, {@afid={'afid', 0x3d, 0x3f}}, {@cachetag={'cachetag', 0x3d, 'wfdno'}}, {@fscache}, {@cache_none}], [{@fowner_gt={'fowner>', r6}}, {@context={'context', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '*-:*.'}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x24) pwritev(r2, &(0x7f0000000480)=[{&(0x7f00000005c0)="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", 0x139}], 0x1, 0x7fff, 0x6) sendfile(r1, r2, 0x0, 0x2) openat(r2, &(0x7f0000000040)='./file0\x00', 0x4900, 0x100) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:05:57 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 15) 19:05:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 16) 19:05:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x7f, 0x7ba1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r3, r4, 0x0, 0x2) openat$cgroup_devices(r4, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:05:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x7f, 0x7ba1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r3, r4, 0x0, 0x2) openat$cgroup_devices(r4, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1248.995203] syz-executor.3: attempt to access beyond end of device [ 1248.995203] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1248.995307] loop6: detected capacity change from 0 to 40 19:05:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 15) 19:05:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 16) [ 1249.063444] syz-executor.6: attempt to access beyond end of device [ 1249.063444] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 17) 19:05:58 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1249.127152] loop3: detected capacity change from 0 to 40 [ 1249.132041] FAULT_INJECTION: forcing a failure. [ 1249.132041] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.132817] CPU: 1 PID: 7862 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1249.133346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1249.133875] Call Trace: 19:05:58 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1249.134054] [ 1249.134312] dump_stack_lvl+0xc1/0xf0 [ 1249.134613] should_fail_ex+0x4b4/0x5b0 [ 1249.134891] ? __es_insert_extent+0x3a9/0x12f0 [ 1249.135209] should_failslab+0x9/0x20 [ 1249.135468] kmem_cache_alloc+0x5a/0x390 [ 1249.135743] __es_insert_extent+0x3a9/0x12f0 [ 1249.136067] ext4_es_insert_delayed_block+0x298/0x470 [ 1249.136423] ? __pfx_ext4_es_insert_delayed_block+0x10/0x10 [ 1249.136804] ? percpu_counter_add_batch+0xc8/0x180 [ 1249.137137] ? do_raw_spin_unlock+0x53/0x220 [ 1249.137441] ? _raw_spin_unlock+0x1e/0x40 [ 1249.137720] ? ext4_da_reserve_space+0xf8/0x3d0 [ 1249.138046] ext4_da_get_block_prep+0xc1e/0x1180 [ 1249.138377] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1249.138746] ? __pfx_lock_release+0x10/0x10 [ 1249.139046] ? create_empty_buffers+0x300/0xa60 [ 1249.139366] ? do_raw_spin_unlock+0x53/0x220 [ 1249.139672] __block_write_begin_int+0x380/0x13d0 [ 1249.140012] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1249.140374] ? __pfx___block_write_begin_int+0x10/0x10 [ 1249.140737] ext4_da_write_begin+0x357/0x8e0 [ 1249.141047] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1249.141412] generic_perform_write+0x25a/0x580 [ 1249.141740] ? __pfx_generic_perform_write+0x10/0x10 [ 1249.142092] ? __pfx_file_modified_flags+0x10/0x10 [ 1249.142473] ext4_buffered_write_iter+0x164/0x460 [ 1249.142810] ext4_file_write_iter+0x3ff/0x1950 [ 1249.143154] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1249.143522] ? lock_is_held_type+0x9f/0x120 [ 1249.143836] do_iter_readv_writev+0x211/0x3c0 [ 1249.144158] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1249.144521] ? avc_policy_seqno+0x9/0x20 [ 1249.144819] ? security_file_permission+0xb5/0xe0 [ 1249.145176] do_iter_write+0x189/0x7e0 [ 1249.145468] vfs_writev+0x1ae/0x660 [ 1249.145746] ? __pfx_vfs_writev+0x10/0x10 [ 1249.146039] ? __fget_files+0x24e/0x480 [ 1249.146325] ? lock_release+0x1e3/0x680 [ 1249.146631] ? __fget_files+0x270/0x480 [ 1249.146924] __x64_sys_pwritev+0x233/0x310 [ 1249.147227] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1249.147572] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1249.147961] do_syscall_64+0x3f/0x90 [ 1249.148240] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1249.148616] RIP: 0033:0x7f92c35cab19 [ 1249.148875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1249.150085] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1249.150613] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1249.151099] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1249.151602] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1249.152101] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1249.152617] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1249.153134] [ 1249.161894] loop6: detected capacity change from 0 to 40 [ 1249.173450] syz-executor.3: attempt to access beyond end of device [ 1249.173450] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1249.197871] syz-executor.6: attempt to access beyond end of device [ 1249.197871] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:58 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:05:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 16) [ 1249.257773] loop3: detected capacity change from 0 to 40 19:05:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 18) [ 1249.277445] syz-executor.3: attempt to access beyond end of device [ 1249.277445] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:05:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 17) [ 1249.370577] loop6: detected capacity change from 0 to 40 [ 1249.377542] FAULT_INJECTION: forcing a failure. [ 1249.377542] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.378600] CPU: 1 PID: 7877 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1249.379144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1249.379693] Call Trace: [ 1249.379869] [ 1249.380031] dump_stack_lvl+0xc1/0xf0 [ 1249.380319] should_fail_ex+0x4b4/0x5b0 [ 1249.380602] ? ext4_init_io_end+0x27/0x180 [ 1249.380901] should_failslab+0x9/0x20 [ 1249.381161] kmem_cache_alloc+0x5a/0x390 [ 1249.381439] ext4_init_io_end+0x27/0x180 [ 1249.381717] ext4_do_writepages+0xafb/0x3020 [ 1249.382027] ? lock_acquire+0x19a/0x4c0 [ 1249.382298] ? do_writepages+0x1ad/0x650 [ 1249.382601] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1249.382927] ? __pfx___lock_acquire+0x10/0x10 [ 1249.382916] syz-executor.6: attempt to access beyond end of device [ 1249.382916] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1249.383241] ? lock_is_held_type+0x9f/0x120 [ 1249.384940] ext4_writepages+0x274/0x5e0 [ 1249.385223] ? __pfx_ext4_writepages+0x10/0x10 [ 1249.385539] ? do_writepages+0x50d/0x650 [ 1249.385838] ? __pfx_ext4_writepages+0x10/0x10 [ 1249.386146] do_writepages+0x1ad/0x650 [ 1249.386436] ? __pfx_do_writepages+0x10/0x10 [ 1249.386760] ? do_raw_spin_lock+0x125/0x270 [ 1249.387055] ? do_raw_spin_unlock+0x53/0x220 [ 1249.387364] ? _raw_spin_unlock+0x1e/0x40 [ 1249.387645] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1249.388014] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1249.388336] ? __pfx_lock_release+0x10/0x10 [ 1249.388638] __filemap_fdatawrite_range+0xba/0x100 [ 1249.388969] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1249.389355] ? ext4_buffered_write_iter+0x19c/0x460 [ 1249.389706] ? lock_release+0x1e3/0x680 [ 1249.389990] file_write_and_wait_range+0xd2/0x140 [ 1249.390323] ext4_sync_file+0x221/0xe30 [ 1249.390614] ? __pfx_ext4_sync_file+0x10/0x10 [ 1249.390926] vfs_fsync_range+0x141/0x230 [ 1249.391222] ext4_buffered_write_iter+0x37d/0x460 [ 1249.391564] ext4_file_write_iter+0x3ff/0x1950 [ 1249.391908] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1249.392262] ? lock_is_held_type+0x9f/0x120 [ 1249.392578] do_iter_readv_writev+0x211/0x3c0 [ 1249.392897] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1249.393259] ? avc_policy_seqno+0x9/0x20 [ 1249.393547] ? security_file_permission+0xb5/0xe0 [ 1249.393899] do_iter_write+0x189/0x7e0 [ 1249.394187] vfs_writev+0x1ae/0x660 [ 1249.394463] ? __pfx_vfs_writev+0x10/0x10 [ 1249.394767] ? __fget_files+0x24e/0x480 [ 1249.395047] ? lock_release+0x1e3/0x680 [ 1249.395344] ? __fget_files+0x270/0x480 [ 1249.395630] __x64_sys_pwritev+0x233/0x310 [ 1249.395937] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1249.396275] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1249.396655] do_syscall_64+0x3f/0x90 [ 1249.396922] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1249.397289] RIP: 0033:0x7f4320699b19 [ 1249.397547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1249.398778] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1249.399272] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1249.399733] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1249.400195] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1249.400657] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1249.401118] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1249.401598] [ 1249.787593] SELinux: security_context_str_to_sid (root) failed with errno=-22 19:06:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 18) 19:06:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r0, r1, 0x0, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x9, 0x8, 0x6, 0x0, 0x5, 0x10000, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0x8}, 0x14808, 0x3, 0x80, 0x4, 0x80000000, 0xc4f, 0xfff7, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r1, 0x9, r3, 0xa) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r5, &(0x7f0000000140)='./file1\x00', 0x400, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:06:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x4, 0x0, 0x0, 0x1011008, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="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"]) 19:06:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 19) 19:06:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 17) 19:06:09 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:06:09 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:06:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) readahead(r1, 0x3a78, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = clone3(&(0x7f0000000400)={0x2000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000240), {0x20}, &(0x7f0000000480)=""/66, 0x42, &(0x7f0000000380)=""/45, &(0x7f00000003c0)}, 0x58) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x9, 0xe4, 0x5, 0x3, 0x0, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x80, 0xfffffffffffff770, 0x1, 0x7, 0xffffffffffffa5a7, 0x3, 0x9, 0x0, 0x3, 0x0, 0x2}, r3, 0x4, r0, 0xb) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1260.724642] loop3: detected capacity change from 0 to 40 [ 1260.732833] FAULT_INJECTION: forcing a failure. [ 1260.732833] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.734232] CPU: 0 PID: 7891 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1260.735221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.736220] Call Trace: [ 1260.736550] [ 1260.736854] dump_stack_lvl+0xc1/0xf0 [ 1260.737377] should_fail_ex+0x4b4/0x5b0 [ 1260.737899] ? jbd2__journal_start+0x194/0x810 [ 1260.738501] should_failslab+0x9/0x20 [ 1260.739018] kmem_cache_alloc+0x5a/0x390 [ 1260.739555] jbd2__journal_start+0x194/0x810 [ 1260.740139] __ext4_journal_start_sb+0x3d7/0x560 [ 1260.740748] ? ext4_dirty_inode+0xa5/0x130 [ 1260.741279] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1260.741882] ext4_dirty_inode+0xa5/0x130 [ 1260.742396] __mark_inode_dirty+0x1aa/0xc10 [ 1260.742982] ? pagecache_isize_extended+0xba/0x500 [ 1260.743616] generic_write_end+0x319/0x3d0 [ 1260.744176] ext4_da_write_end+0x162/0x870 [ 1260.744734] generic_perform_write+0x318/0x580 [ 1260.745357] ? __pfx_generic_perform_write+0x10/0x10 [ 1260.746028] ? __pfx_file_modified_flags+0x10/0x10 [ 1260.746692] ext4_buffered_write_iter+0x164/0x460 [ 1260.747338] ext4_file_write_iter+0x3ff/0x1950 [ 1260.747970] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1260.748632] ? lock_is_held_type+0x9f/0x120 [ 1260.749209] do_iter_readv_writev+0x211/0x3c0 [ 1260.749803] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1260.750464] ? avc_policy_seqno+0x9/0x20 [ 1260.751029] ? security_file_permission+0xb5/0xe0 [ 1260.751672] do_iter_write+0x189/0x7e0 [ 1260.752189] vfs_writev+0x1ae/0x660 [ 1260.752662] ? __pfx_vfs_writev+0x10/0x10 [ 1260.753181] ? __fget_files+0x24e/0x480 [ 1260.753687] ? lock_release+0x1e3/0x680 [ 1260.754202] ? __fget_files+0x270/0x480 [ 1260.754725] __x64_sys_pwritev+0x233/0x310 [ 1260.755267] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1260.755885] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1260.756554] do_syscall_64+0x3f/0x90 [ 1260.756789] loop6: detected capacity change from 0 to 40 [ 1260.757033] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1260.758066] RIP: 0033:0x7f92c35cab19 [ 1260.758532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.760729] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1260.761641] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1260.762520] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1260.763370] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.764220] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1260.765055] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1260.765916] [ 1260.771390] syz-executor.3: attempt to access beyond end of device [ 1260.771390] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1260.786967] FAULT_INJECTION: forcing a failure. [ 1260.786967] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1260.788018] CPU: 1 PID: 7900 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1260.788690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.789267] Call Trace: [ 1260.789459] [ 1260.789629] dump_stack_lvl+0xc1/0xf0 [ 1260.789935] should_fail_ex+0x4b4/0x5b0 [ 1260.790240] prepare_alloc_pages+0x178/0x500 [ 1260.790577] __alloc_pages+0x149/0x480 [ 1260.790875] ? lock_acquire+0x19a/0x4c0 [ 1260.791173] ? __pfx___alloc_pages+0x10/0x10 [ 1260.791622] ? lock_release+0x1e3/0x680 [ 1260.791979] alloc_pages+0x1a0/0x260 [ 1260.792354] filemap_alloc_folio+0x374/0x410 [ 1260.792721] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1260.793199] ? lock_acquire+0x19a/0x4c0 [ 1260.793574] ? find_held_lock+0x2c/0x110 [ 1260.793880] ? folio_memcg_lock+0xf9/0x4b0 [ 1260.794203] __filemap_get_folio+0x285/0x8d0 [ 1260.794537] ? folio_memcg_unlock+0xbd/0x240 [ 1260.794885] pagecache_get_page+0x2e/0x120 [ 1260.795205] ? __pfx_fat_get_block+0x10/0x10 [ 1260.795537] block_write_begin+0x35/0x450 [ 1260.795848] cont_write_begin+0x4fe/0x700 [ 1260.796153] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1260.796622] ? __pfx_fat_get_block+0x10/0x10 [ 1260.796951] ? __pfx_cont_write_begin+0x10/0x10 [ 1260.797302] ? __mark_inode_dirty+0x249/0xc10 [ 1260.797653] ? generic_write_end+0x1fe/0x3d0 [ 1260.797979] fat_write_begin+0x89/0x180 [ 1260.798254] ? __pfx_fat_get_block+0x10/0x10 [ 1260.798591] cont_write_begin+0x2fc/0x700 [ 1260.798911] ? __pfx_fat_get_block+0x10/0x10 [ 1260.799235] ? __pfx_cont_write_begin+0x10/0x10 [ 1260.799587] ? lock_release+0x1e3/0x680 [ 1260.799880] ? __pfx_fault_in_readable+0x10/0x10 [ 1260.800240] fat_write_begin+0x89/0x180 [ 1260.800538] ? __pfx_fat_get_block+0x10/0x10 [ 1260.800871] generic_perform_write+0x25a/0x580 [ 1260.801225] ? __pfx_generic_perform_write+0x10/0x10 [ 1260.801604] ? __pfx_fat_update_time+0x10/0x10 [ 1260.801916] ? __pfx_file_update_time+0x10/0x10 [ 1260.802271] ? generic_write_checks+0x2c0/0x400 [ 1260.802598] __generic_file_write_iter+0x308/0x4b0 [ 1260.802971] generic_file_write_iter+0xe7/0x350 [ 1260.803329] do_iter_readv_writev+0x211/0x3c0 [ 1260.803649] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1260.804031] ? avc_policy_seqno+0x9/0x20 [ 1260.804325] ? security_file_permission+0xb5/0xe0 [ 1260.804698] do_iter_write+0x189/0x7e0 [ 1260.804981] vfs_writev+0x1ae/0x660 [ 1260.805267] ? __pfx_vfs_writev+0x10/0x10 [ 1260.805568] ? __fget_files+0x24e/0x480 [ 1260.805867] ? lock_release+0x1e3/0x680 [ 1260.806169] ? __fget_files+0x270/0x480 [ 1260.806485] __x64_sys_pwritev+0x233/0x310 [ 1260.806806] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1260.807168] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1260.807532] do_syscall_64+0x3f/0x90 [ 1260.807824] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1260.808183] RIP: 0033:0x7fb6935b7b19 [ 1260.808462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.809645] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1260.810200] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1260.810683] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1260.811196] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.811666] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1260.812181] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1260.812681] 19:06:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r3, 0xffffffff, 0x0, 0x7fff}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1260.820498] 9pnet_fd: Insufficient options for proto=fd [ 1260.829852] 9pnet_fd: Insufficient options for proto=fd 19:06:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 19) 19:06:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 18) [ 1260.893725] loop3: detected capacity change from 0 to 40 19:06:09 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1b7841, 0x18) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) fcntl$setstatus(r0, 0x4, 0x800) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7) write$binfmt_aout(r5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x94c) write$P9_RFLUSH(r3, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) 19:06:09 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1260.913554] FAULT_INJECTION: forcing a failure. [ 1260.913554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1260.914440] CPU: 1 PID: 7913 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1260.915057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.915647] Call Trace: [ 1260.915842] [ 1260.916013] dump_stack_lvl+0xc1/0xf0 [ 1260.916324] should_fail_ex+0x4b4/0x5b0 [ 1260.916639] prepare_alloc_pages+0x178/0x500 [ 1260.916988] __alloc_pages+0x149/0x480 [ 1260.917289] ? lock_acquire+0x19a/0x4c0 [ 1260.917597] ? __pfx___alloc_pages+0x10/0x10 [ 1260.917947] ? lock_release+0x1e3/0x680 [ 1260.918264] alloc_pages+0x1a0/0x260 [ 1260.918570] filemap_alloc_folio+0x374/0x410 [ 1260.918928] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1260.919279] ? lock_acquire+0x19a/0x4c0 [ 1260.919579] ? find_held_lock+0x2c/0x110 [ 1260.919898] ? folio_memcg_lock+0xf9/0x4b0 [ 1260.920226] __filemap_get_folio+0x285/0x8d0 [ 1260.920563] ? folio_memcg_unlock+0xbd/0x240 [ 1260.920904] pagecache_get_page+0x2e/0x120 [ 1260.921234] ? __pfx_fat_get_block+0x10/0x10 [ 1260.921573] block_write_begin+0x35/0x450 [ 1260.921891] cont_write_begin+0x4fe/0x700 [ 1260.922205] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1260.922647] ? __pfx_fat_get_block+0x10/0x10 [ 1260.922973] ? __pfx_cont_write_begin+0x10/0x10 [ 1260.923323] ? __mark_inode_dirty+0x249/0xc10 [ 1260.923675] ? generic_write_end+0x1fe/0x3d0 [ 1260.924008] fat_write_begin+0x89/0x180 [ 1260.924301] ? __pfx_fat_get_block+0x10/0x10 [ 1260.924627] cont_write_begin+0x2fc/0x700 [ 1260.924948] ? __pfx_fat_get_block+0x10/0x10 [ 1260.925254] ? __pfx_cont_write_begin+0x10/0x10 [ 1260.925598] ? lock_release+0x1e3/0x680 [ 1260.925870] ? __pfx_fault_in_readable+0x10/0x10 [ 1260.926231] fat_write_begin+0x89/0x180 [ 1260.926499] ? __pfx_fat_get_block+0x10/0x10 [ 1260.926880] generic_perform_write+0x25a/0x580 [ 1260.927376] ? __pfx_generic_perform_write+0x10/0x10 [ 1260.927785] ? __pfx_fat_update_time+0x10/0x10 [ 1260.928133] ? __pfx_file_update_time+0x10/0x10 [ 1260.928494] ? generic_write_checks+0x2c0/0x400 [ 1260.928857] __generic_file_write_iter+0x308/0x4b0 [ 1260.929233] generic_file_write_iter+0xe7/0x350 [ 1260.929591] do_iter_readv_writev+0x211/0x3c0 [ 1260.929920] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1260.930303] ? avc_policy_seqno+0x9/0x20 [ 1260.930627] ? security_file_permission+0xb5/0xe0 [ 1260.930995] do_iter_write+0x189/0x7e0 [ 1260.931309] vfs_writev+0x1ae/0x660 [ 1260.931602] ? __pfx_vfs_writev+0x10/0x10 [ 1260.931899] ? __fget_files+0x24e/0x480 [ 1260.932198] ? lock_release+0x1e3/0x680 [ 1260.932500] ? __fget_files+0x270/0x480 [ 1260.932807] __x64_sys_pwritev+0x233/0x310 [ 1260.933127] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1260.933495] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1260.933879] do_syscall_64+0x3f/0x90 [ 1260.934179] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1260.934554] RIP: 0033:0x7f4320699b19 [ 1260.934865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.936102] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1260.936663] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1260.937202] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1260.937730] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.938268] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1260.938808] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1260.939351] 19:06:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 20) 19:06:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 19) 19:06:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 20) 19:06:10 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) [ 1261.092153] loop3: detected capacity change from 0 to 40 [ 1261.101828] syz-executor.3: attempt to access beyond end of device [ 1261.101828] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1261.112798] FAULT_INJECTION: forcing a failure. [ 1261.112798] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.114266] CPU: 0 PID: 7924 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1261.115272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1261.116232] Call Trace: [ 1261.116554] [ 1261.116842] dump_stack_lvl+0xc1/0xf0 [ 1261.117352] should_fail_ex+0x4b4/0x5b0 [ 1261.117859] ? ext4_init_io_end+0x27/0x180 [ 1261.118403] should_failslab+0x9/0x20 [ 1261.118925] kmem_cache_alloc+0x5a/0x390 [ 1261.119457] ext4_init_io_end+0x27/0x180 [ 1261.119982] ext4_do_writepages+0xafb/0x3020 [ 1261.120548] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1261.121171] ? mark_lock.part.0+0xef/0x2f30 [ 1261.121741] ? lock_acquire+0x19a/0x4c0 [ 1261.122249] ? do_writepages+0x1ad/0x650 [ 1261.122789] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1261.123407] ? lock_is_held_type+0x9f/0x120 [ 1261.123970] ext4_writepages+0x274/0x5e0 [ 1261.124484] ? __pfx_ext4_writepages+0x10/0x10 [ 1261.125071] ? __pfx___lock_acquire+0x10/0x10 [ 1261.125655] ? find_held_lock+0x2c/0x110 [ 1261.126189] ? __pfx_ext4_writepages+0x10/0x10 [ 1261.126793] do_writepages+0x1ad/0x650 [ 1261.127306] ? __pfx_do_writepages+0x10/0x10 [ 1261.127881] ? do_raw_spin_lock+0x125/0x270 [ 1261.128428] ? do_raw_spin_unlock+0x53/0x220 [ 1261.128991] ? _raw_spin_unlock+0x1e/0x40 [ 1261.129522] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1261.130203] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1261.130858] ? __pfx_lock_release+0x10/0x10 [ 1261.131487] __filemap_fdatawrite_range+0xba/0x100 [ 1261.132135] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1261.132829] ? ext4_buffered_write_iter+0x19c/0x460 [ 1261.133459] ? lock_release+0x1e3/0x680 [ 1261.133983] file_write_and_wait_range+0xd2/0x140 [ 1261.134605] ext4_sync_file+0x221/0xe30 [ 1261.135102] ? __pfx_ext4_sync_file+0x10/0x10 [ 1261.135661] vfs_fsync_range+0x141/0x230 [ 1261.136204] ext4_buffered_write_iter+0x37d/0x460 [ 1261.136818] ext4_file_write_iter+0x3ff/0x1950 [ 1261.137416] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1261.138062] ? lock_is_held_type+0x9f/0x120 [ 1261.138617] do_iter_readv_writev+0x211/0x3c0 [ 1261.139198] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1261.139858] ? avc_policy_seqno+0x9/0x20 [ 1261.140388] ? security_file_permission+0xb5/0xe0 [ 1261.140995] do_iter_write+0x189/0x7e0 [ 1261.141524] vfs_writev+0x1ae/0x660 [ 1261.142027] ? __pfx_vfs_writev+0x10/0x10 [ 1261.142559] ? __fget_files+0x24e/0x480 [ 1261.143088] ? lock_release+0x1e3/0x680 [ 1261.143609] ? __fget_files+0x270/0x480 [ 1261.144125] __x64_sys_pwritev+0x233/0x310 [ 1261.144687] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1261.145325] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1261.146007] do_syscall_64+0x3f/0x90 [ 1261.146490] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1261.147205] RIP: 0033:0x7f92c35cab19 [ 1261.147691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1261.149838] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1261.150788] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1261.151668] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1261.152539] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1261.153409] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1261.154284] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1261.155179] [ 1261.186145] loop6: detected capacity change from 0 to 40 [ 1261.210965] syz-executor.6: attempt to access beyond end of device [ 1261.210965] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:06:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x80000000, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="0ce468eee222d5dad2", 0x9, 0x3f}, {&(0x7f0000000300)="254be8a546a71b8f61b06920795ae06bfa053f920ce772d975c275bd8377572f7ae56a23fd6bcc03acb2f23bffb01fd2e22287610247f9cb7766058a364336ebe0e6e84fc935c4377845f7a12bac717231d17092e9d28a399dbdeacb4846a32754294a79e4d4b28e2677301ce9807056e7153c8621c9ef5be9a790d180194e9323950c341d5cb57f91ae15e1e083220e620be7cd7647fee777ace95509362696f05c06465d3ade71cd", 0xa9, 0x9}], 0x20014, &(0x7f00000003c0)={[{'\'#}'}, {}, {}], [{@obj_user={'obj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@subj_type={'subj_type', 0x3d, '{%-%#'}}, {@audit}, {@fowner_gt={'fowner>', 0xee01}}, {@euid_lt={'euid<', 0xee00}}, {@uid_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@dont_appraise}]}) close(r1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) connect$bt_sco(r2, &(0x7f0000000000), 0x8) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:06:22 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) readahead(r1, 0x3a78, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = clone3(&(0x7f0000000400)={0x2000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000240), {0x20}, &(0x7f0000000480)=""/66, 0x42, &(0x7f0000000380)=""/45, &(0x7f00000003c0)}, 0x58) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x9, 0xe4, 0x5, 0x3, 0x0, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x80, 0xfffffffffffff770, 0x1, 0x7, 0xffffffffffffa5a7, 0x3, 0x9, 0x0, 0x3, 0x0, 0x2}, r3, 0x4, r0, 0xb) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:06:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 21) 19:06:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 21) 19:06:22 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:06:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r3, 0xffffffff, 0x0, 0x7fff}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:06:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 20) 19:06:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) fcntl$setsig(r0, 0xa, 0x28) [ 1273.691087] loop6: detected capacity change from 0 to 40 [ 1273.702154] loop3: detected capacity change from 0 to 40 [ 1273.715288] syz-executor.6: attempt to access beyond end of device [ 1273.715288] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:06:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 22) 19:06:22 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1273.796880] loop6: detected capacity change from 0 to 40 [ 1273.802022] syz-executor.3: attempt to access beyond end of device [ 1273.802022] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1273.812507] FAULT_INJECTION: forcing a failure. [ 1273.812507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1273.813540] CPU: 0 PID: 7956 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1273.814211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1273.814916] Call Trace: [ 1273.815139] [ 1273.815328] dump_stack_lvl+0xc1/0xf0 [ 1273.815687] should_fail_ex+0x4b4/0x5b0 [ 1273.816037] prepare_alloc_pages+0x178/0x500 [ 1273.816432] __alloc_pages+0x149/0x480 [ 1273.816758] ? lock_acquire+0x19a/0x4c0 [ 1273.817090] ? __pfx___alloc_pages+0x10/0x10 [ 1273.817473] ? lock_release+0x1e3/0x680 [ 1273.817840] alloc_pages+0x1a0/0x260 [ 1273.818174] filemap_alloc_folio+0x374/0x410 [ 1273.818566] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1273.819005] ? lock_acquire+0x19a/0x4c0 [ 1273.819263] ? find_held_lock+0x2c/0x110 [ 1273.819621] ? folio_memcg_lock+0xf9/0x4b0 [ 1273.819997] __filemap_get_folio+0x285/0x8d0 [ 1273.820373] ? folio_memcg_unlock+0xbd/0x240 [ 1273.820760] pagecache_get_page+0x2e/0x120 [ 1273.821132] ? __pfx_fat_get_block+0x10/0x10 [ 1273.821520] block_write_begin+0x35/0x450 [ 1273.821890] cont_write_begin+0x4fe/0x700 [ 1273.822249] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1273.822798] ? __pfx_fat_get_block+0x10/0x10 [ 1273.823190] ? __pfx_cont_write_begin+0x10/0x10 [ 1273.823586] ? __mark_inode_dirty+0x249/0xc10 [ 1273.823986] ? generic_write_end+0x1fe/0x3d0 [ 1273.824374] fat_write_begin+0x89/0x180 [ 1273.824715] ? __pfx_fat_get_block+0x10/0x10 [ 1273.825097] cont_write_begin+0x2fc/0x700 [ 1273.825465] ? __pfx_fat_get_block+0x10/0x10 [ 1273.825851] ? __pfx_cont_write_begin+0x10/0x10 [ 1273.826259] ? lock_release+0x1e3/0x680 [ 1273.826612] ? __pfx_fault_in_readable+0x10/0x10 [ 1273.826936] fat_write_begin+0x89/0x180 [ 1273.827285] ? __pfx_fat_get_block+0x10/0x10 [ 1273.827678] generic_perform_write+0x25a/0x580 [ 1273.828090] ? __pfx_generic_perform_write+0x10/0x10 [ 1273.828530] ? __pfx_fat_update_time+0x10/0x10 [ 1273.828956] ? __pfx_file_update_time+0x10/0x10 [ 1273.829387] ? generic_write_checks+0x2c0/0x400 [ 1273.829827] __generic_file_write_iter+0x308/0x4b0 [ 1273.830297] generic_file_write_iter+0xe7/0x350 [ 1273.830753] do_iter_readv_writev+0x211/0x3c0 [ 1273.831069] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1273.831539] ? avc_policy_seqno+0x9/0x20 [ 1273.831923] ? security_file_permission+0xb5/0xe0 [ 1273.832381] do_iter_write+0x189/0x7e0 [ 1273.832770] vfs_writev+0x1ae/0x660 [ 1273.833119] ? __pfx_vfs_writev+0x10/0x10 [ 1273.833509] ? __fget_files+0x24e/0x480 [ 1273.833882] ? lock_release+0x1e3/0x680 [ 1273.834269] ? __fget_files+0x270/0x480 [ 1273.834654] __x64_sys_pwritev+0x233/0x310 [ 1273.835053] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1273.835503] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1273.835869] do_syscall_64+0x3f/0x90 [ 1273.836218] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1273.836574] RIP: 0033:0x7fb6935b7b19 [ 1273.836916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1273.838064] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1273.838729] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1273.839357] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1273.840000] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.840637] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1273.841281] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1273.841937] 19:06:22 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:06:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x75c, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x5831, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x6000) r0 = syz_io_uring_setup(0x187b, &(0x7f00000086c0)={0x0, 0xe459, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000008740), &(0x7f0000008780)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x100000b, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2aa5, &(0x7f0000000300)={0x0, 0x19de, 0x20, 0x1, 0xf9, 0x0, r0}, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x34cdce302219713a, 0x0, @fd_index=0x5, 0x5, 0x0, 0x8, 0x5, 0x1}, 0x6) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3de98daacc64926c6e4f0a11ecde0ab87507111c62b8b5449caaa3efffc3f4c0dc8ac20b09b7d716a4159908fabca027d2e4050158667b1b47d637f254c0e6c5fb93cd1942bcb1ab7f30e80e8f096fc5f74035dccb12aa79f448c173e7a0ab9f1e105dd883d4bb8240a8d234ab901cfff5b7d328250d2b36a51c5dd358f10c6b7807c620ad1d6e95e3b4d898abf00612ceae04b1a11c6ef636dbf06a901a000cc916c40b44a2f2a3ee04e9ca0aa43b144d5022f1c0cb7e21a27443c94d0243", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000380)={0x20000008}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r4, r6, 0x0, 0x2) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 19:06:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 22) 19:06:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 21) 19:06:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 23) 19:06:22 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1273.962147] FAULT_INJECTION: forcing a failure. [ 1273.962147] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.963101] CPU: 0 PID: 7965 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1273.963785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1273.964466] Call Trace: [ 1273.964690] [ 1273.964887] dump_stack_lvl+0xc1/0xf0 [ 1273.965236] should_fail_ex+0x4b4/0x5b0 [ 1273.965599] ? ext4_init_io_end+0x27/0x180 [ 1273.965987] should_failslab+0x9/0x20 [ 1273.966317] kmem_cache_alloc+0x5a/0x390 [ 1273.966677] ext4_init_io_end+0x27/0x180 [ 1273.967039] ext4_do_writepages+0xbfd/0x3020 [ 1273.967426] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1273.967841] ? lock_acquire+0x19a/0x4c0 [ 1273.968099] ? do_writepages+0x1ad/0x650 [ 1273.968470] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1273.968796] ? lock_is_held_type+0x9f/0x120 [ 1273.969193] ext4_writepages+0x274/0x5e0 [ 1273.969456] ? __pfx_ext4_writepages+0x10/0x10 [ 1273.969846] ? __pfx___lock_acquire+0x10/0x10 [ 1273.970145] ? find_held_lock+0x2c/0x110 [ 1273.970494] ? __pfx_ext4_writepages+0x10/0x10 [ 1273.970797] do_writepages+0x1ad/0x650 [ 1273.971135] ? __pfx_do_writepages+0x10/0x10 [ 1273.971425] ? do_raw_spin_lock+0x125/0x270 [ 1273.971808] ? do_raw_spin_unlock+0x53/0x220 [ 1273.972222] ? _raw_spin_unlock+0x1e/0x40 [ 1273.972506] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1273.972950] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1273.973251] ? __pfx_lock_release+0x10/0x10 [ 1273.973610] __filemap_fdatawrite_range+0xba/0x100 [ 1273.973924] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1273.974402] ? ext4_buffered_write_iter+0x19c/0x460 [ 1273.974731] ? lock_release+0x1e3/0x680 [ 1273.975099] file_write_and_wait_range+0xd2/0x140 [ 1273.975424] ext4_sync_file+0x221/0xe30 [ 1273.975790] ? __pfx_ext4_sync_file+0x10/0x10 [ 1273.976098] vfs_fsync_range+0x141/0x230 [ 1273.976481] ext4_buffered_write_iter+0x37d/0x460 [ 1273.976819] ext4_file_write_iter+0x3ff/0x1950 [ 1273.977217] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1273.977545] ? lock_is_held_type+0x9f/0x120 [ 1273.977927] do_iter_readv_writev+0x211/0x3c0 [ 1273.978226] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1273.978653] ? avc_policy_seqno+0x9/0x20 [ 1273.978939] ? security_file_permission+0xb5/0xe0 [ 1273.979353] do_iter_write+0x189/0x7e0 [ 1273.979621] vfs_writev+0x1ae/0x660 [ 1273.979951] ? __pfx_vfs_writev+0x10/0x10 [ 1273.980224] ? __fget_files+0x24e/0x480 [ 1273.980563] ? lock_release+0x1e3/0x680 [ 1273.980832] ? __fget_files+0x270/0x480 [ 1273.981179] __x64_sys_pwritev+0x233/0x310 [ 1273.981461] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1273.981916] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1273.982278] do_syscall_64+0x3f/0x90 [ 1273.982611] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1273.982952] RIP: 0033:0x7f92c35cab19 [ 1273.983261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1273.984343] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1273.984995] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1273.985455] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1273.985910] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.986483] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1273.986922] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1273.987532] [ 1273.987774] 9pnet_fd: Insufficient options for proto=fd [ 1274.004504] loop3: detected capacity change from 0 to 40 [ 1274.048728] FAULT_INJECTION: forcing a failure. [ 1274.048728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1274.050232] CPU: 1 PID: 7969 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1274.051263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.052280] Call Trace: [ 1274.052623] [ 1274.052919] dump_stack_lvl+0xc1/0xf0 [ 1274.053446] should_fail_ex+0x4b4/0x5b0 [ 1274.053971] prepare_alloc_pages+0x178/0x500 [ 1274.054563] __alloc_pages+0x149/0x480 [ 1274.055080] ? lock_acquire+0x19a/0x4c0 [ 1274.055613] ? __pfx___alloc_pages+0x10/0x10 [ 1274.056186] ? lock_release+0x1e3/0x680 [ 1274.056735] alloc_pages+0x1a0/0x260 [ 1274.057251] filemap_alloc_folio+0x374/0x410 [ 1274.057868] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1274.058503] ? lock_acquire+0x19a/0x4c0 [ 1274.059056] ? find_held_lock+0x2c/0x110 [ 1274.059614] ? folio_memcg_lock+0xf9/0x4b0 [ 1274.060208] __filemap_get_folio+0x285/0x8d0 [ 1274.060803] ? folio_memcg_unlock+0xbd/0x240 [ 1274.061404] pagecache_get_page+0x2e/0x120 [ 1274.061981] ? __pfx_fat_get_block+0x10/0x10 [ 1274.062566] block_write_begin+0x35/0x450 [ 1274.063144] cont_write_begin+0x4fe/0x700 [ 1274.063704] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1274.064539] ? __pfx_fat_get_block+0x10/0x10 [ 1274.065125] ? __pfx_cont_write_begin+0x10/0x10 [ 1274.065751] ? __mark_inode_dirty+0x249/0xc10 [ 1274.066366] ? generic_write_end+0x1fe/0x3d0 [ 1274.066968] fat_write_begin+0x89/0x180 [ 1274.067503] ? __pfx_fat_get_block+0x10/0x10 [ 1274.068100] cont_write_begin+0x2fc/0x700 [ 1274.068668] ? __pfx_fat_get_block+0x10/0x10 [ 1274.069259] ? __pfx_cont_write_begin+0x10/0x10 [ 1274.069882] ? lock_release+0x1e3/0x680 [ 1274.070428] ? __pfx_fault_in_readable+0x10/0x10 [ 1274.071079] fat_write_begin+0x89/0x180 [ 1274.071610] ? __pfx_fat_get_block+0x10/0x10 [ 1274.072211] generic_perform_write+0x25a/0x580 [ 1274.072850] ? __pfx_generic_perform_write+0x10/0x10 [ 1274.073535] ? __pfx_fat_update_time+0x10/0x10 [ 1274.074149] ? __pfx_file_update_time+0x10/0x10 [ 1274.074893] ? generic_write_checks+0x2c0/0x400 [ 1274.075505] __generic_file_write_iter+0x308/0x4b0 [ 1274.076339] generic_file_write_iter+0xe7/0x350 [ 1274.076954] do_iter_readv_writev+0x211/0x3c0 [ 1274.077658] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1274.078457] ? avc_policy_seqno+0x9/0x20 [ 1274.079016] ? security_file_permission+0xb5/0xe0 [ 1274.079656] do_iter_write+0x189/0x7e0 [ 1274.080199] vfs_writev+0x1ae/0x660 [ 1274.080697] ? __pfx_vfs_writev+0x10/0x10 [ 1274.081249] ? __fget_files+0x24e/0x480 [ 1274.081772] ? lock_release+0x1e3/0x680 [ 1274.082316] ? __fget_files+0x270/0x480 [ 1274.082874] __x64_sys_pwritev+0x233/0x310 [ 1274.083444] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1274.084074] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1274.084775] do_syscall_64+0x3f/0x90 [ 1274.085290] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1274.085966] RIP: 0033:0x7f4320699b19 [ 1274.086444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.088683] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1274.089641] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1274.090666] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1274.091798] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.092911] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1274.093799] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1274.094718] [ 1274.097635] 9pnet_fd: Insufficient options for proto=fd [ 1274.117111] loop6: detected capacity change from 0 to 40 [ 1274.136972] syz-executor.6: attempt to access beyond end of device [ 1274.136972] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1275.817415] Bluetooth: hci7: command 0x0405 tx timeout 19:06:36 executing program 0: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7, &(0x7f0000000040)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:06:36 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:06:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x1, 0x0, 0x2}}, 0x14) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:06:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 24) 19:06:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 23) 19:06:36 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:06:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 22) 19:06:36 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1287.690768] loop3: detected capacity change from 0 to 40 [ 1287.697091] loop6: detected capacity change from 0 to 40 [ 1287.739578] syz-executor.6: attempt to access beyond end of device [ 1287.739578] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1287.745006] syz-executor.3: attempt to access beyond end of device [ 1287.745006] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:06:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 23) 19:06:36 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:06:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0xfffffffd}, {0x7}], r0}, 0x18, 0x60323842804bf45c) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 19:06:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 24) 19:06:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 25) [ 1287.896032] FAULT_INJECTION: forcing a failure. [ 1287.896032] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.897481] CPU: 0 PID: 8006 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1287.898488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.899523] Call Trace: [ 1287.899854] [ 1287.900146] dump_stack_lvl+0xc1/0xf0 [ 1287.900649] should_fail_ex+0x4b4/0x5b0 [ 1287.901152] ? jbd2__journal_start+0x194/0x810 [ 1287.901737] should_failslab+0x9/0x20 [ 1287.902227] kmem_cache_alloc+0x5a/0x390 [ 1287.902760] jbd2__journal_start+0x194/0x810 [ 1287.903351] __ext4_journal_start_sb+0x3d7/0x560 [ 1287.903957] ? ext4_do_writepages+0xd7a/0x3020 [ 1287.904538] ? ext4_meta_trans_blocks+0x252/0x310 [ 1287.905180] ext4_do_writepages+0xd7a/0x3020 [ 1287.905755] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1287.906372] ? lock_acquire+0x19a/0x4c0 [ 1287.906884] ? do_writepages+0x1ad/0x650 [ 1287.907468] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1287.908100] ? lock_is_held_type+0x9f/0x120 [ 1287.908678] ext4_writepages+0x274/0x5e0 [ 1287.909212] ? __pfx_ext4_writepages+0x10/0x10 [ 1287.909789] ? __pfx___lock_acquire+0x10/0x10 [ 1287.910388] ? find_held_lock+0x2c/0x110 [ 1287.910937] ? __pfx_ext4_writepages+0x10/0x10 [ 1287.911513] do_writepages+0x1ad/0x650 [ 1287.912033] ? __pfx_do_writepages+0x10/0x10 [ 1287.912610] ? do_raw_spin_lock+0x125/0x270 [ 1287.913165] ? do_raw_spin_unlock+0x53/0x220 [ 1287.913720] ? _raw_spin_unlock+0x1e/0x40 [ 1287.914252] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1287.914910] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1287.915557] ? __pfx_lock_release+0x10/0x10 [ 1287.916084] __filemap_fdatawrite_range+0xba/0x100 [ 1287.916707] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1287.917398] ? ext4_buffered_write_iter+0x19c/0x460 [ 1287.918030] ? lock_release+0x1e3/0x680 [ 1287.918530] file_write_and_wait_range+0xd2/0x140 [ 1287.919176] ext4_sync_file+0x221/0xe30 [ 1287.919684] ? __pfx_ext4_sync_file+0x10/0x10 [ 1287.920245] vfs_fsync_range+0x141/0x230 [ 1287.920758] ext4_buffered_write_iter+0x37d/0x460 [ 1287.921382] ext4_file_write_iter+0x3ff/0x1950 [ 1287.922003] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1287.922643] ? lock_is_held_type+0x9f/0x120 [ 1287.923219] do_iter_readv_writev+0x211/0x3c0 [ 1287.923806] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1287.924427] ? avc_policy_seqno+0x9/0x20 [ 1287.924946] ? security_file_permission+0xb5/0xe0 [ 1287.925557] do_iter_write+0x189/0x7e0 [ 1287.926071] vfs_writev+0x1ae/0x660 [ 1287.926541] ? __pfx_vfs_writev+0x10/0x10 [ 1287.927098] ? __fget_files+0x24e/0x480 [ 1287.927602] ? lock_release+0x1e3/0x680 [ 1287.928125] ? __fget_files+0x270/0x480 [ 1287.928641] __x64_sys_pwritev+0x233/0x310 [ 1287.929188] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1287.929817] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1287.930489] do_syscall_64+0x3f/0x90 [ 1287.931014] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1287.931674] RIP: 0033:0x7f92c35cab19 [ 1287.932136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1287.934250] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1287.935199] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1287.936070] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1287.936929] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.937783] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1287.938650] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1287.939585] [ 1287.940011] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15997; err -12 [ 1288.013761] loop6: detected capacity change from 0 to 40 [ 1288.027371] loop3: detected capacity change from 0 to 40 [ 1288.049297] FAULT_INJECTION: forcing a failure. [ 1288.049297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1288.051044] CPU: 1 PID: 8014 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1288.052040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.053038] Call Trace: [ 1288.053364] [ 1288.053659] dump_stack_lvl+0xc1/0xf0 [ 1288.054171] should_fail_ex+0x4b4/0x5b0 [ 1288.054691] prepare_alloc_pages+0x178/0x500 [ 1288.055283] __alloc_pages+0x149/0x480 [ 1288.055789] ? lock_acquire+0x19a/0x4c0 [ 1288.056302] ? __pfx___alloc_pages+0x10/0x10 [ 1288.056881] ? lock_release+0x1e3/0x680 [ 1288.057419] alloc_pages+0x1a0/0x260 [ 1288.057924] filemap_alloc_folio+0x374/0x410 [ 1288.058499] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1288.059143] ? lock_acquire+0x19a/0x4c0 [ 1288.059664] ? find_held_lock+0x2c/0x110 [ 1288.060206] ? folio_memcg_lock+0xf9/0x4b0 [ 1288.060781] __filemap_get_folio+0x285/0x8d0 [ 1288.061361] ? folio_memcg_unlock+0xbd/0x240 [ 1288.061938] pagecache_get_page+0x2e/0x120 [ 1288.062497] ? __pfx_fat_get_block+0x10/0x10 [ 1288.063066] block_write_begin+0x35/0x450 [ 1288.063612] cont_write_begin+0x4fe/0x700 [ 1288.064145] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1288.064953] ? __pfx_fat_get_block+0x10/0x10 [ 1288.065507] ? __pfx_cont_write_begin+0x10/0x10 [ 1288.066102] ? __mark_inode_dirty+0x249/0xc10 [ 1288.066709] ? generic_write_end+0x1fe/0x3d0 [ 1288.067310] fat_write_begin+0x89/0x180 [ 1288.067826] ? __pfx_fat_get_block+0x10/0x10 [ 1288.068407] cont_write_begin+0x2fc/0x700 [ 1288.068957] ? __pfx_fat_get_block+0x10/0x10 [ 1288.069533] ? __pfx_cont_write_begin+0x10/0x10 [ 1288.070134] ? lock_release+0x1e3/0x680 [ 1288.070652] ? __pfx_fault_in_readable+0x10/0x10 [ 1288.071273] fat_write_begin+0x89/0x180 [ 1288.071791] ? __pfx_fat_get_block+0x10/0x10 [ 1288.072347] generic_perform_write+0x25a/0x580 [ 1288.072967] ? __pfx_generic_perform_write+0x10/0x10 [ 1288.073624] ? __pfx_fat_update_time+0x10/0x10 [ 1288.074209] ? __pfx_file_update_time+0x10/0x10 [ 1288.074830] ? generic_write_checks+0x2c0/0x400 [ 1288.075451] __generic_file_write_iter+0x308/0x4b0 [ 1288.076095] generic_file_write_iter+0xe7/0x350 [ 1288.076712] do_iter_readv_writev+0x211/0x3c0 [ 1288.077307] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1288.077948] ? avc_policy_seqno+0x9/0x20 [ 1288.078485] ? security_file_permission+0xb5/0xe0 [ 1288.079126] do_iter_write+0x189/0x7e0 [ 1288.079647] vfs_writev+0x1ae/0x660 [ 1288.080134] ? __pfx_vfs_writev+0x10/0x10 [ 1288.080674] ? __fget_files+0x24e/0x480 [ 1288.081180] ? lock_release+0x1e3/0x680 [ 1288.081714] ? __fget_files+0x270/0x480 [ 1288.082239] __x64_sys_pwritev+0x233/0x310 [ 1288.082795] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1288.083439] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1288.084123] do_syscall_64+0x3f/0x90 [ 1288.084610] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1288.085287] RIP: 0033:0x7fb6935b7b19 [ 1288.085749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.087936] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1288.088865] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1288.089738] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1288.090592] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.091463] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1288.092304] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1288.093174] [ 1288.401218] syz-executor.3: attempt to access beyond end of device [ 1288.401218] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1291.192884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1291.196804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1291.199059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1291.201811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1291.204026] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1291.205250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1293.225448] Bluetooth: hci1: command 0x0409 tx timeout [ 1295.273442] Bluetooth: hci1: command 0x041b tx timeout [ 1297.321415] Bluetooth: hci1: command 0x040f tx timeout [ 1299.369416] Bluetooth: hci1: command 0x0419 tx timeout [ 1308.564965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.566200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.569254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1308.627640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.629206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.632324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1321.280443] loop6: detected capacity change from 0 to 40 19:07:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 24) 19:07:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000058c0)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000000640)=""/163, 0xa3}], 0x5, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000003dc0)=[{&(0x7f00000008c0)=""/240, 0xf0}, {&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000000ac0)=""/157, 0x9d}, {&(0x7f0000000b80)=""/27, 0x1b}, {&(0x7f0000003c40)=""/106, 0x6a}, {&(0x7f0000003cc0)=""/199, 0xc7}], 0x6, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003e40), 0x6e, &(0x7f0000005440)=[{&(0x7f0000003ec0)=""/101, 0x65}, {&(0x7f0000003f40)=""/152, 0x98}, {&(0x7f0000004000)=""/142, 0x8e}, {&(0x7f00000040c0)=""/66, 0x42}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/169, 0xa9}, {&(0x7f0000005200)=""/152, 0x98}, {&(0x7f00000052c0)=""/208, 0xd0}, {&(0x7f00000053c0)=""/106, 0x6a}], 0x9, &(0x7f0000005500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000005600), 0x6e, &(0x7f0000005800)=[{&(0x7f0000005680)=""/191, 0xbf}, {&(0x7f0000005740)=""/179, 0xb3}], 0x2, &(0x7f0000005840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x4, 0x100, &(0x7f00000059c0)={0x0, 0x3938700}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000003c0)={@id={0x2, 0x0, @b}}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x401, 0x4, &(0x7f0000000340)=[{&(0x7f0000000c40)="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", 0x1000, 0x80000000}, {&(0x7f0000000180)="f378afbefef264fb228db168b15831c995f187500bbc4cfcb870223ba5e27c48217873d49ba0503bef25433dab081395831e5b249bec67ea8d5b075f10b7a1b85a11621ee6700e667368e218f919edfe71363f2c0118693696bda0ddf684e988e9193e270aa4808c65840400dc3f098e559a63cc94b9066c5789a38c2d26579f43838ee267d888ca536410024eb77714610e194044243606921192c9ffe9e28fffa1d9bc3088483d8b3f2d0a78698541a1", 0xb1, 0xff}, {&(0x7f0000000240)="49fab2be715b014d55331c247fec3f38074645e2d26f3744a5fd9bb548de28f3c01e4e9ba456de2471a85fac763aa8eed6af7edb0891996847b1516df06940351526514368dd7e7d1c59e7a5d58175daac90db97c6d3af021b51c3b35a53af415d0ce1e358af877e0541984583af73f5fcdb31601d3c", 0x76, 0x400}, {&(0x7f00000002c0)="c0b29dfee3f7d624bc78df4df56ff74c1be9df7bfbd36cfae4bfc5f816c9ccb9a880a281a36b59f014d8b185049fccaac0f744fbcca411aca9e2d4f4fd809ab5c28fa29337", 0x45, 0x8001}], 0xa08003, &(0x7f0000005a00)={[{@mode={'mode', 0x3d, 0x7ff}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, r0}}, {@huge_within_size}], [{@measure}]}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) mount(0xfffffffffffffffe, &(0x7f0000005a80)='./file0\x00', &(0x7f0000005ac0)='proc\x00', 0x2, &(0x7f0000005b00)='\x00') move_mount(r2, &(0x7f0000005b40)='./file0\x00', r1, &(0x7f0000005b80)='./file0\x00', 0x21) 19:07:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x4000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r0, r1, 0x0, 0x2) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x2, 0x6, 0x101, 0x0, 0x1, "92724113dc49e0b6a67100", 0x5, 0x660}) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x2d1d09bebc79f1d, r0, 0x65558000) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:07:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 26) 19:07:10 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:07:10 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:07:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 25) 19:07:10 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1321.287812] syz-executor.6: attempt to access beyond end of device [ 1321.287812] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:07:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 27) 19:07:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 25) [ 1321.363660] loop3: detected capacity change from 0 to 40 [ 1321.368052] loop6: detected capacity change from 0 to 40 [ 1321.372773] loop5: detected capacity change from 0 to 264192 [ 1321.376468] tmpfs: Bad value for 'gid' [ 1321.386809] FAULT_INJECTION: forcing a failure. [ 1321.386809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1321.387867] CPU: 0 PID: 8503 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1321.388516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1321.389190] Call Trace: [ 1321.389192] loop5: detected capacity change from 0 to 264192 [ 1321.389393] [ 1321.389400] dump_stack_lvl+0xc1/0xf0 [ 1321.390670] should_fail_ex+0x4b4/0x5b0 [ 1321.391016] prepare_alloc_pages+0x178/0x500 [ 1321.391400] __alloc_pages+0x149/0x480 [ 1321.391724] ? lock_acquire+0x19a/0x4c0 [ 1321.392066] ? __pfx___alloc_pages+0x10/0x10 [ 1321.392451] ? lock_release+0x1e3/0x680 [ 1321.392805] alloc_pages+0x1a0/0x260 [ 1321.392881] tmpfs: Bad value for 'gid' [ 1321.393125] filemap_alloc_folio+0x374/0x410 [ 1321.394022] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1321.394352] ? lock_acquire+0x19a/0x4c0 [ 1321.394688] ? find_held_lock+0x2c/0x110 [ 1321.395034] ? folio_memcg_lock+0xf9/0x4b0 [ 1321.395412] __filemap_get_folio+0x285/0x8d0 [ 1321.395790] ? folio_memcg_unlock+0xbd/0x240 [ 1321.396178] pagecache_get_page+0x2e/0x120 [ 1321.396545] ? __pfx_fat_get_block+0x10/0x10 [ 1321.396921] block_write_begin+0x35/0x450 [ 1321.397288] cont_write_begin+0x4fe/0x700 [ 1321.397637] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1321.398167] ? __pfx_fat_get_block+0x10/0x10 [ 1321.398546] ? __pfx_cont_write_begin+0x10/0x10 [ 1321.398947] ? __mark_inode_dirty+0x249/0xc10 [ 1321.399362] ? generic_write_end+0x1fe/0x3d0 [ 1321.399659] fat_write_begin+0x89/0x180 [ 1321.399988] ? __pfx_fat_get_block+0x10/0x10 [ 1321.400375] cont_write_begin+0x2fc/0x700 [ 1321.400730] ? __pfx_fat_get_block+0x10/0x10 [ 1321.401108] ? __pfx_cont_write_begin+0x10/0x10 [ 1321.401506] ? lock_release+0x1e3/0x680 [ 1321.401845] ? __pfx_fault_in_readable+0x10/0x10 [ 1321.402253] fat_write_begin+0x89/0x180 [ 1321.402584] ? __pfx_fat_get_block+0x10/0x10 [ 1321.402970] generic_perform_write+0x25a/0x580 [ 1321.403384] ? __pfx_generic_perform_write+0x10/0x10 [ 1321.403720] ? __pfx_fat_update_time+0x10/0x10 [ 1321.404106] ? __pfx_file_update_time+0x10/0x10 [ 1321.404510] ? generic_write_checks+0x2c0/0x400 [ 1321.404915] __generic_file_write_iter+0x308/0x4b0 [ 1321.405339] generic_file_write_iter+0xe7/0x350 [ 1321.405740] do_iter_readv_writev+0x211/0x3c0 [ 1321.406136] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1321.406554] ? avc_policy_seqno+0x9/0x20 [ 1321.406920] ? security_file_permission+0xb5/0xe0 [ 1321.407241] do_iter_write+0x189/0x7e0 [ 1321.407597] vfs_writev+0x1ae/0x660 [ 1321.407918] ? __pfx_vfs_writev+0x10/0x10 [ 1321.408277] ? __fget_files+0x24e/0x480 [ 1321.408612] ? lock_release+0x1e3/0x680 [ 1321.408976] ? __fget_files+0x270/0x480 [ 1321.409322] __x64_sys_pwritev+0x233/0x310 [ 1321.409708] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1321.410118] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1321.410467] do_syscall_64+0x3f/0x90 [ 1321.410801] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1321.411253] RIP: 0033:0x7f4320699b19 [ 1321.411514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1321.412976] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1321.413611] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1321.414196] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1321.414790] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.415386] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1321.415979] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1321.416589] [ 1321.428552] syz-executor.6: attempt to access beyond end of device [ 1321.428552] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1321.443068] FAULT_INJECTION: forcing a failure. [ 1321.443068] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.443983] CPU: 0 PID: 8510 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1321.444637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1321.445308] Call Trace: [ 1321.445529] [ 1321.445733] dump_stack_lvl+0xc1/0xf0 [ 1321.446067] should_fail_ex+0x4b4/0x5b0 [ 1321.446414] ? jbd2__journal_start+0x24a/0x810 [ 1321.446802] should_failslab+0x9/0x20 [ 1321.447137] kmem_cache_alloc+0x5a/0x390 [ 1321.447513] jbd2__journal_start+0x24a/0x810 [ 1321.447897] __ext4_journal_start_sb+0x3d7/0x560 [ 1321.448302] ? ext4_do_writepages+0xd7a/0x3020 [ 1321.448694] ? ext4_meta_trans_blocks+0x252/0x310 [ 1321.449125] ext4_do_writepages+0xd7a/0x3020 [ 1321.449504] ? __pfx_mark_lock.part.0+0x10/0x10 [ 1321.449922] ? lock_acquire+0x19a/0x4c0 [ 1321.450262] ? do_writepages+0x1ad/0x650 [ 1321.450613] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1321.451036] ? lock_is_held_type+0x9f/0x120 [ 1321.451324] ext4_writepages+0x274/0x5e0 [ 1321.451681] ? __pfx_ext4_writepages+0x10/0x10 [ 1321.452071] ? __pfx___lock_acquire+0x10/0x10 [ 1321.452467] ? find_held_lock+0x2c/0x110 [ 1321.452830] ? __pfx_ext4_writepages+0x10/0x10 [ 1321.453220] do_writepages+0x1ad/0x650 [ 1321.453569] ? __pfx_do_writepages+0x10/0x10 [ 1321.453952] ? do_raw_spin_lock+0x125/0x270 [ 1321.454327] ? do_raw_spin_unlock+0x53/0x220 [ 1321.454623] ? _raw_spin_unlock+0x1e/0x40 [ 1321.454967] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1321.455311] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1321.455724] ? __pfx_lock_release+0x10/0x10 [ 1321.456081] __filemap_fdatawrite_range+0xba/0x100 [ 1321.456504] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1321.456974] ? ext4_buffered_write_iter+0x19c/0x460 [ 1321.457420] ? lock_release+0x1e3/0x680 [ 1321.457764] file_write_and_wait_range+0xd2/0x140 [ 1321.458165] ext4_sync_file+0x221/0xe30 [ 1321.458506] ? __pfx_ext4_sync_file+0x10/0x10 [ 1321.458892] vfs_fsync_range+0x141/0x230 [ 1321.459164] ext4_buffered_write_iter+0x37d/0x460 [ 1321.459600] ext4_file_write_iter+0x3ff/0x1950 [ 1321.460006] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1321.460450] ? lock_is_held_type+0x9f/0x120 [ 1321.460836] do_iter_readv_writev+0x211/0x3c0 [ 1321.461233] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1321.461670] ? avc_policy_seqno+0x9/0x20 [ 1321.462023] ? security_file_permission+0xb5/0xe0 [ 1321.462450] do_iter_write+0x189/0x7e0 [ 1321.462726] vfs_writev+0x1ae/0x660 [ 1321.463041] ? __pfx_vfs_writev+0x10/0x10 [ 1321.463318] ? __fget_files+0x24e/0x480 [ 1321.463660] ? lock_release+0x1e3/0x680 [ 1321.464016] ? __fget_files+0x270/0x480 [ 1321.464373] __x64_sys_pwritev+0x233/0x310 [ 1321.464747] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1321.465157] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1321.465616] do_syscall_64+0x3f/0x90 [ 1321.465943] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1321.466389] RIP: 0033:0x7f92c35cab19 [ 1321.466634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1321.468123] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1321.468755] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1321.469352] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1321.469949] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.470543] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1321.471136] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1321.471768] [ 1321.472024] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16023; err -12 19:07:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 28) [ 1321.531941] loop6: detected capacity change from 0 to 40 [ 1321.540968] FAULT_INJECTION: forcing a failure. [ 1321.540968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1321.541962] CPU: 0 PID: 8514 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1321.542652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1321.543333] Call Trace: [ 1321.543537] [ 1321.543724] dump_stack_lvl+0xc1/0xf0 [ 1321.544069] should_fail_ex+0x4b4/0x5b0 [ 1321.544414] prepare_alloc_pages+0x178/0x500 [ 1321.544789] __alloc_pages+0x149/0x480 [ 1321.545120] ? lock_acquire+0x19a/0x4c0 [ 1321.545459] ? __pfx___alloc_pages+0x10/0x10 [ 1321.545840] ? lock_release+0x1e3/0x680 [ 1321.546199] alloc_pages+0x1a0/0x260 [ 1321.546533] filemap_alloc_folio+0x374/0x410 [ 1321.546918] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1321.547238] ? lock_acquire+0x19a/0x4c0 [ 1321.547585] ? find_held_lock+0x2c/0x110 [ 1321.547929] ? folio_memcg_lock+0xf9/0x4b0 [ 1321.548311] __filemap_get_folio+0x285/0x8d0 [ 1321.548706] ? folio_memcg_unlock+0xbd/0x240 [ 1321.549086] pagecache_get_page+0x2e/0x120 [ 1321.549460] ? __pfx_fat_get_block+0x10/0x10 [ 1321.549835] block_write_begin+0x35/0x450 [ 1321.550200] cont_write_begin+0x4fe/0x700 [ 1321.550556] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1321.550966] ? __pfx_fat_get_block+0x10/0x10 [ 1321.551333] ? __pfx_cont_write_begin+0x10/0x10 [ 1321.551655] ? __mark_inode_dirty+0x249/0xc10 [ 1321.552054] ? generic_write_end+0x1fe/0x3d0 [ 1321.552440] fat_write_begin+0x89/0x180 [ 1321.552777] ? __pfx_fat_get_block+0x10/0x10 [ 1321.553152] cont_write_begin+0x2fc/0x700 [ 1321.553522] ? __pfx_fat_get_block+0x10/0x10 [ 1321.553901] ? __pfx_cont_write_begin+0x10/0x10 [ 1321.554301] ? lock_release+0x1e3/0x680 [ 1321.554652] ? __pfx_fault_in_readable+0x10/0x10 [ 1321.555058] fat_write_begin+0x89/0x180 [ 1321.555405] ? __pfx_fat_get_block+0x10/0x10 [ 1321.555704] generic_perform_write+0x25a/0x580 [ 1321.556097] ? __pfx_generic_perform_write+0x10/0x10 [ 1321.556536] ? __pfx_fat_update_time+0x10/0x10 [ 1321.556929] ? __pfx_file_update_time+0x10/0x10 [ 1321.557331] ? generic_write_checks+0x2c0/0x400 [ 1321.557737] __generic_file_write_iter+0x308/0x4b0 [ 1321.558168] generic_file_write_iter+0xe7/0x350 [ 1321.558561] do_iter_readv_writev+0x211/0x3c0 [ 1321.558961] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1321.559400] ? avc_policy_seqno+0x9/0x20 [ 1321.559682] ? security_file_permission+0xb5/0xe0 [ 1321.560094] do_iter_write+0x189/0x7e0 [ 1321.560445] vfs_writev+0x1ae/0x660 [ 1321.560774] ? __pfx_vfs_writev+0x10/0x10 [ 1321.561134] ? __fget_files+0x24e/0x480 [ 1321.561467] ? lock_release+0x1e3/0x680 [ 1321.561822] ? __fget_files+0x270/0x480 [ 1321.562169] __x64_sys_pwritev+0x233/0x310 [ 1321.562539] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1321.562957] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1321.563427] do_syscall_64+0x3f/0x90 [ 1321.563764] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1321.564201] RIP: 0033:0x7fb6935b7b19 [ 1321.564513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1321.565995] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1321.566622] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1321.567216] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1321.567817] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.568406] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1321.569002] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1321.569612] 19:07:10 executing program 4: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7, &(0x7f0000000040)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:07:10 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:07:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 26) 19:07:10 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240000c5}, 0x20048045) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0x1ff}, {0x1ff, 0x1}]}, 0x14, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7405006e733db85b8f7566642c7266646e6f3d36450400e37fe212ac66ab3dabd535", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 1323.369494] Bluetooth: hci1: command 0x0405 tx timeout [ 1334.934054] FAULT_INJECTION: forcing a failure. [ 1334.934054] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.935128] CPU: 0 PID: 8536 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1334.935642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1334.936201] Call Trace: [ 1334.936393] [ 1334.936558] dump_stack_lvl+0xc1/0xf0 [ 1334.936842] should_fail_ex+0x4b4/0x5b0 [ 1334.937133] ? ext4_alloc_io_end_vec+0x23/0x130 [ 1334.937473] should_failslab+0x9/0x20 [ 1334.937754] kmem_cache_alloc+0x5a/0x390 [ 1334.938051] ext4_alloc_io_end_vec+0x23/0x130 [ 1334.938370] ext4_do_writepages+0x1672/0x3020 [ 1334.938699] ? do_writepages+0x1ad/0x650 [ 1334.938995] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1334.939329] ? __pfx___lock_acquire+0x10/0x10 [ 1334.939653] ? lock_is_held_type+0x9f/0x120 [ 1334.939965] ext4_writepages+0x274/0x5e0 [ 1334.940251] ? __pfx_ext4_writepages+0x10/0x10 [ 1334.940570] ? do_writepages+0x50d/0x650 [ 1334.940875] ? __pfx_ext4_writepages+0x10/0x10 [ 1334.941192] do_writepages+0x1ad/0x650 [ 1334.941476] ? __pfx_do_writepages+0x10/0x10 [ 1334.941786] ? do_raw_spin_lock+0x125/0x270 [ 1334.942087] ? do_raw_spin_unlock+0x53/0x220 [ 1334.942393] ? _raw_spin_unlock+0x1e/0x40 [ 1334.942675] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1334.943024] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1334.943362] ? __pfx_lock_release+0x10/0x10 [ 1334.943669] __filemap_fdatawrite_range+0xba/0x100 [ 1334.944024] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1334.944424] ? ext4_buffered_write_iter+0x19c/0x460 [ 1334.944793] ? lock_release+0x1e3/0x680 [ 1334.945083] file_write_and_wait_range+0xd2/0x140 [ 1334.945406] ext4_sync_file+0x221/0xe30 [ 1334.945697] ? __pfx_ext4_sync_file+0x10/0x10 [ 1334.945997] vfs_fsync_range+0x141/0x230 [ 1334.946302] ext4_buffered_write_iter+0x37d/0x460 [ 1334.946638] ext4_file_write_iter+0x3ff/0x1950 [ 1334.946985] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1334.947357] ? lock_is_held_type+0x9f/0x120 [ 1334.947663] do_iter_readv_writev+0x211/0x3c0 [ 1334.947970] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1334.948295] ? avc_policy_seqno+0x9/0x20 [ 1334.948578] ? security_file_permission+0xb5/0xe0 [ 1334.948917] do_iter_write+0x189/0x7e0 [ 1334.949200] vfs_writev+0x1ae/0x660 [ 1334.949475] ? __pfx_vfs_writev+0x10/0x10 [ 1334.949756] ? __fget_files+0x24e/0x480 [ 1334.950053] ? lock_release+0x1e3/0x680 [ 1334.950332] ? __fget_files+0x270/0x480 [ 1334.950641] __x64_sys_pwritev+0x233/0x310 [ 1334.950931] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1334.951253] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1334.951669] do_syscall_64+0x3f/0x90 [ 1334.951960] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1334.952339] RIP: 0033:0x7f92c35cab19 [ 1334.952612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1334.953854] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1334.954386] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1334.954888] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1334.955396] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1334.955912] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1334.956408] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1334.956926] [ 1334.969115] loop6: detected capacity change from 0 to 40 19:07:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 27) 19:07:23 executing program 4: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7, &(0x7f0000000040)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:07:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r1, r2, 0x0, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) r3 = open_tree(r2, &(0x7f0000000240)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x0, 0x7, 0x5, 0x0, 0xffff, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x7000, 0x5, 0x3ff, 0x4, 0x20, 0x20, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x6, r3, 0x8) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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", @ANYRES32=r2]) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x81, 0x0, 0x6, 0x0, 0x0, 0x3, 0x33034, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x3ff}, 0x2824, 0x2, 0x5, 0x0, 0x5, 0x101, 0x9, 0x0, 0xffffffff, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 19:07:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffe6d, 0x0, 0x11140f3, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="6e0080", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 19:07:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 29) 19:07:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 26) 19:07:23 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'osx.', '\xaa\xaa\xaa\xaa\xaa'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 19:07:23 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1334.991089] 9pnet_fd: Insufficient options for proto=fd [ 1334.995958] 9pnet_fd: Insufficient options for proto=fd [ 1335.000986] loop3: detected capacity change from 0 to 40 [ 1335.037869] syz-executor.6: attempt to access beyond end of device [ 1335.037869] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:07:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x800000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1335.067323] syz-executor.3: attempt to access beyond end of device [ 1335.067323] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:07:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 30) 19:07:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r3, 0xffffffff, 0x0, 0x7fff}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:07:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 28) [ 1335.119163] perf: interrupt took too long (2540 > 2500), lowering kernel.perf_event_max_sample_rate to 78000 19:07:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 27) [ 1335.166281] loop6: detected capacity change from 0 to 40 19:07:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1d, 0x0, 0x1020000, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000140)={0x2a, 0x29, 0x2, {0x7fff, [{{0x0, 0x2}, 0xef10000000000000, 0x1, 0x7, './file1'}]}}, 0x2a) sendfile(r2, r3, 0x0, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x3, '\x00', @auto="33bf049ff8a4a03776aedd9676903f45"}) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c1dacd16f72b3beed65effd7d7f9859abeffd28e1685dbe51764c57f0e3e3b9e48c49c1df1ad6da115e182f033ab898c9622ade8ce3ea60db02e79df5cea4f3b5117e8e47de7e8c7aabb94e7eb117233475ff7fffffa04aa902f385710117f4e0be0737ffc9c996a94702dd36b6b1a4cb2b95fa34fb93847765569c130e14613fa55d3721441e0783689d67a1c75dbf588ed06bc947b1d6"]) [ 1335.182896] loop3: detected capacity change from 0 to 40 19:07:24 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1335.194755] syz-executor.6: attempt to access beyond end of device [ 1335.194755] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1335.209125] syz-executor.3: attempt to access beyond end of device [ 1335.209125] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:07:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x711}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1335.287089] perf: interrupt took too long (3189 > 3175), lowering kernel.perf_event_max_sample_rate to 62000 19:07:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 29) 19:07:38 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:07:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 31) 19:07:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 28) 19:07:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r1, r2, 0x0, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) r3 = open_tree(r2, &(0x7f0000000240)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x0, 0x7, 0x5, 0x0, 0xffff, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x7000, 0x5, 0x3ff, 0x4, 0x20, 0x20, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x6, r3, 0x8) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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", @ANYRES32=r2]) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x81, 0x0, 0x6, 0x0, 0x0, 0x3, 0x33034, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x3ff}, 0x2824, 0x2, 0x5, 0x0, 0x5, 0x101, 0x9, 0x0, 0xffffffff, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) [ 1349.910436] loop3: detected capacity change from 0 to 40 19:07:38 executing program 4: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7, &(0x7f0000000040)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:07:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x808000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') openat(r2, &(0x7f0000000140)='./file0\x00', 0x400, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r3, r4, 0x0, 0x2) r5 = dup(0xffffffffffffffff) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x401, r4, &(0x7f0000000180)="c15d427c352d08dae919bacdfa00241acd1e1e95d697b132e1c4be8d55655f588b458648ac74974164daa0f258fd0a4c23ce46b56ee7767f7e85e7664eca41d9addc9cb7eafda65002f9a46510ed6f853caccc35c719ed067e3dfec35ad2d005f3cbdfe6e69353acbef2bb571397cac1b80fb40adc76b74dcd34d29f", 0x7c, 0x80000001, 0x0, 0x3, r5}, &(0x7f0000000240)) 19:07:38 executing program 0: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0xf4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x12a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}]}}, @CTA_PROTOINFO={0x64, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x60, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x67}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x80}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1f}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7f}]}}]}, 0xf4}}, 0x40880) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xd5, 0x0, 0x4, 0x80, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf9, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x40403, 0xffffffffffff8001, 0x1, 0x8, 0xffffffffffffffff, 0x100, 0x0, 0x0, 0x2, 0x0, 0x80000001}, 0x0, 0xc, r0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1349.929539] FAULT_INJECTION: forcing a failure. [ 1349.929539] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.930771] CPU: 0 PID: 8588 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1349.931419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.932083] Call Trace: [ 1349.932296] [ 1349.932483] dump_stack_lvl+0xc1/0xf0 [ 1349.932824] should_fail_ex+0x4b4/0x5b0 [ 1349.933163] ? ext4_mb_new_blocks+0x653/0x4670 [ 1349.933549] should_failslab+0x9/0x20 [ 1349.933869] kmem_cache_alloc+0x5a/0x390 [ 1349.934207] ext4_mb_new_blocks+0x653/0x4670 [ 1349.934583] ? mark_held_locks+0x9e/0xe0 [ 1349.934947] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 1349.935351] ? kasan_set_track+0x25/0x30 [ 1349.935690] ? __kasan_kmalloc+0x7f/0x90 [ 1349.936028] ? ext4_cache_extents+0x68/0x2d0 [ 1349.936383] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1349.936773] ? ext4_ext_search_right+0x2e3/0xbd0 [ 1349.937158] ? ext4_inode_to_goal_block+0x324/0x430 [ 1349.937567] ext4_ext_map_blocks+0x1e14/0x5970 [ 1349.937943] ? __pfx___lock_acquire+0x10/0x10 [ 1349.938302] ? __pfx___lock_acquire+0x10/0x10 [ 1349.938658] ? __lock_acquire+0x1936/0x63b0 [ 1349.939006] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1349.939393] ? ext4_map_blocks+0x704/0x19e0 [ 1349.939763] ? __pfx_lock_acquire+0x10/0x10 [ 1349.940102] ? lock_release+0x1e3/0x680 [ 1349.940418] ? __pfx_lock_release+0x10/0x10 [ 1349.940760] ? lock_is_held_type+0x9f/0x120 [ 1349.941122] ? __pfx_down_write+0x10/0x10 [ 1349.941461] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1349.941841] ext4_map_blocks+0x776/0x19e0 [ 1349.942182] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1349.942555] ? kmem_cache_alloc+0x307/0x390 [ 1349.942904] ext4_do_writepages+0x1883/0x3020 [ 1349.943287] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1349.943668] ? __pfx___lock_acquire+0x10/0x10 [ 1349.944033] ? lock_is_held_type+0x9f/0x120 [ 1349.944381] ext4_writepages+0x274/0x5e0 [ 1349.944699] ? __pfx_ext4_writepages+0x10/0x10 [ 1349.945061] ? do_writepages+0x50d/0x650 [ 1349.945418] ? __pfx_ext4_writepages+0x10/0x10 [ 1349.945773] do_writepages+0x1ad/0x650 [ 1349.946090] ? __pfx_do_writepages+0x10/0x10 [ 1349.946447] ? do_raw_spin_lock+0x125/0x270 [ 1349.946788] ? do_raw_spin_unlock+0x53/0x220 [ 1349.947140] ? _raw_spin_unlock+0x1e/0x40 [ 1349.947471] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1349.947902] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1349.948272] ? __pfx_lock_release+0x10/0x10 [ 1349.948607] __filemap_fdatawrite_range+0xba/0x100 [ 1349.948989] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1349.949429] ? ext4_buffered_write_iter+0x19c/0x460 [ 1349.949830] ? lock_release+0x1e3/0x680 [ 1349.950146] file_write_and_wait_range+0xd2/0x140 [ 1349.950525] ext4_sync_file+0x221/0xe30 [ 1349.950837] ? __pfx_ext4_sync_file+0x10/0x10 [ 1349.951189] vfs_fsync_range+0x141/0x230 [ 1349.951510] ext4_buffered_write_iter+0x37d/0x460 [ 1349.951907] ext4_file_write_iter+0x3ff/0x1950 [ 1349.952288] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1349.952690] ? lock_is_held_type+0x9f/0x120 [ 1349.953040] do_iter_readv_writev+0x211/0x3c0 [ 1349.953401] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1349.953793] ? avc_policy_seqno+0x9/0x20 [ 1349.954118] ? security_file_permission+0xb5/0xe0 [ 1349.954511] do_iter_write+0x189/0x7e0 [ 1349.954837] vfs_writev+0x1ae/0x660 [ 1349.955135] ? __pfx_vfs_writev+0x10/0x10 [ 1349.955468] ? __fget_files+0x24e/0x480 [ 1349.955787] ? lock_release+0x1e3/0x680 [ 1349.956116] ? __fget_files+0x270/0x480 [ 1349.956440] __x64_sys_pwritev+0x233/0x310 [ 1349.956779] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1349.957159] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1349.957578] do_syscall_64+0x3f/0x90 [ 1349.957882] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1349.958289] RIP: 0033:0x7f92c35cab19 [ 1349.958575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.959938] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1349.960511] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1349.961047] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1349.961586] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.962118] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1349.962655] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1349.963208] [ 1349.964075] loop6: detected capacity change from 0 to 40 [ 1349.987445] FAULT_INJECTION: forcing a failure. [ 1349.987445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1349.988495] CPU: 0 PID: 8589 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1349.989110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.989713] Call Trace: [ 1349.989913] [ 1349.990092] dump_stack_lvl+0xc1/0xf0 [ 1349.990406] should_fail_ex+0x4b4/0x5b0 [ 1349.990724] prepare_alloc_pages+0x178/0x500 [ 1349.991076] __alloc_pages+0x149/0x480 [ 1349.991382] ? lock_acquire+0x19a/0x4c0 [ 1349.991689] ? __pfx___alloc_pages+0x10/0x10 [ 1349.992042] ? lock_release+0x1e3/0x680 [ 1349.992360] alloc_pages+0x1a0/0x260 [ 1349.992664] filemap_alloc_folio+0x374/0x410 [ 1349.993019] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1349.993413] ? lock_acquire+0x19a/0x4c0 [ 1349.993724] ? find_held_lock+0x2c/0x110 [ 1349.994044] ? folio_memcg_lock+0xf9/0x4b0 [ 1349.994384] __filemap_get_folio+0x285/0x8d0 [ 1349.994726] ? folio_memcg_unlock+0xbd/0x240 [ 1349.995075] pagecache_get_page+0x2e/0x120 [ 1349.995406] ? __pfx_fat_get_block+0x10/0x10 [ 1349.995761] block_write_begin+0x35/0x450 [ 1349.996090] cont_write_begin+0x4fe/0x700 [ 1349.996414] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1349.996897] ? __pfx_fat_get_block+0x10/0x10 [ 1349.997238] ? __pfx_cont_write_begin+0x10/0x10 [ 1349.997601] ? __mark_inode_dirty+0x249/0xc10 [ 1349.997966] ? generic_write_end+0x1fe/0x3d0 [ 1349.998324] fat_write_begin+0x89/0x180 [ 1349.998637] ? __pfx_fat_get_block+0x10/0x10 [ 1349.998990] cont_write_begin+0x2fc/0x700 [ 1349.999332] ? __pfx_fat_get_block+0x10/0x10 [ 1349.999683] ? __pfx_cont_write_begin+0x10/0x10 [ 1350.000056] ? lock_release+0x1e3/0x680 [ 1350.000373] ? __pfx_fault_in_readable+0x10/0x10 [ 1350.000739] fat_write_begin+0x89/0x180 [ 1350.001051] ? __pfx_fat_get_block+0x10/0x10 [ 1350.001405] generic_perform_write+0x25a/0x580 [ 1350.001776] ? __pfx_generic_perform_write+0x10/0x10 [ 1350.002177] ? __pfx_fat_update_time+0x10/0x10 [ 1350.002529] ? __pfx_file_update_time+0x10/0x10 [ 1350.002904] ? generic_write_checks+0x2c0/0x400 [ 1350.003269] __generic_file_write_iter+0x308/0x4b0 [ 1350.003640] generic_file_write_iter+0xe7/0x350 [ 1350.004008] do_iter_readv_writev+0x211/0x3c0 [ 1350.004359] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1350.004748] ? avc_policy_seqno+0x9/0x20 [ 1350.005070] ? security_file_permission+0xb5/0xe0 [ 1350.005455] do_iter_write+0x189/0x7e0 [ 1350.005769] vfs_writev+0x1ae/0x660 [ 1350.006054] ? __pfx_vfs_writev+0x10/0x10 [ 1350.006376] ? __fget_files+0x24e/0x480 [ 1350.006684] ? lock_release+0x1e3/0x680 [ 1350.007006] ? __fget_files+0x270/0x480 [ 1350.007323] __x64_sys_pwritev+0x233/0x310 [ 1350.007667] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1350.008061] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1350.008474] do_syscall_64+0x3f/0x90 [ 1350.008779] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1350.009192] RIP: 0033:0x7fb6935b7b19 [ 1350.009480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.010842] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1350.011416] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1350.011956] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1350.012487] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.013021] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1350.013549] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1350.014104] 19:07:39 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:07:39 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:07:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 29) 19:07:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 30) 19:07:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 32) 19:07:39 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:07:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r1, r2, 0x0, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) r3 = open_tree(r2, &(0x7f0000000240)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x0, 0x7, 0x5, 0x0, 0xffff, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x7000, 0x5, 0x3ff, 0x4, 0x20, 0x20, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x6, r3, 0x8) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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", @ANYRES32=r2]) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x81, 0x0, 0x6, 0x0, 0x0, 0x3, 0x33034, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x3ff}, 0x2824, 0x2, 0x5, 0x0, 0x5, 0x101, 0x9, 0x0, 0xffffffff, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 19:07:39 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:07:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1350.314932] loop3: detected capacity change from 0 to 40 [ 1350.327665] loop6: detected capacity change from 0 to 40 [ 1350.367790] syz-executor.3: attempt to access beyond end of device [ 1350.367790] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:07:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 31) 19:07:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 30) [ 1350.442254] FAULT_INJECTION: forcing a failure. [ 1350.442254] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.443825] CPU: 1 PID: 8625 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1350.444849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.445859] Call Trace: [ 1350.446198] [ 1350.446493] dump_stack_lvl+0xc1/0xf0 [ 1350.447035] should_fail_ex+0x4b4/0x5b0 [ 1350.447566] ? ext4_mb_new_blocks+0x653/0x4670 [ 1350.448178] should_failslab+0x9/0x20 [ 1350.448676] kmem_cache_alloc+0x5a/0x390 [ 1350.449209] ext4_mb_new_blocks+0x653/0x4670 [ 1350.449798] ? mark_held_locks+0x9e/0xe0 [ 1350.450362] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 1350.450997] ? kasan_set_track+0x25/0x30 [ 1350.451532] ? __kasan_kmalloc+0x7f/0x90 [ 1350.452082] ? ext4_cache_extents+0x68/0x2d0 [ 1350.452659] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1350.453294] ? ext4_ext_search_right+0x2e3/0xbd0 [ 1350.453912] ? ext4_inode_to_goal_block+0x324/0x430 [ 1350.454588] ext4_ext_map_blocks+0x1e14/0x5970 [ 1350.455226] ? __pfx___lock_acquire+0x10/0x10 [ 1350.455820] ? __pfx___lock_acquire+0x10/0x10 [ 1350.456394] ? __lock_acquire+0x1936/0x63b0 [ 1350.456972] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1350.457618] ? ext4_map_blocks+0x704/0x19e0 [ 1350.458209] ? __pfx_lock_acquire+0x10/0x10 [ 1350.458761] ? lock_release+0x1e3/0x680 [ 1350.459285] ? __pfx_lock_release+0x10/0x10 [ 1350.459863] ? lock_is_held_type+0x9f/0x120 [ 1350.460594] ? __pfx_down_write+0x10/0x10 [ 1350.461154] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1350.461783] ext4_map_blocks+0x776/0x19e0 [ 1350.462353] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1350.462964] ? kmem_cache_alloc+0x307/0x390 [ 1350.463536] ext4_do_writepages+0x1883/0x3020 [ 1350.464153] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1350.464770] ? __pfx___lock_acquire+0x10/0x10 [ 1350.465361] ? lock_is_held_type+0x9f/0x120 [ 1350.465936] ext4_writepages+0x274/0x5e0 [ 1350.466463] ? __pfx_ext4_writepages+0x10/0x10 [ 1350.467060] ? do_writepages+0x50d/0x650 [ 1350.467634] ? __pfx_ext4_writepages+0x10/0x10 [ 1350.468206] do_writepages+0x1ad/0x650 [ 1350.468724] ? __pfx_do_writepages+0x10/0x10 [ 1350.469286] ? do_raw_spin_lock+0x125/0x270 [ 1350.469822] ? do_raw_spin_unlock+0x53/0x220 [ 1350.470390] ? _raw_spin_unlock+0x1e/0x40 [ 1350.470909] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1350.471576] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1350.472188] ? __pfx_lock_release+0x10/0x10 [ 1350.472718] __filemap_fdatawrite_range+0xba/0x100 [ 1350.473325] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1350.474045] ? ext4_buffered_write_iter+0x19c/0x460 [ 1350.474685] ? lock_release+0x1e3/0x680 [ 1350.475209] file_write_and_wait_range+0xd2/0x140 [ 1350.475830] ext4_sync_file+0x221/0xe30 [ 1350.476330] ? __pfx_ext4_sync_file+0x10/0x10 [ 1350.476893] vfs_fsync_range+0x141/0x230 [ 1350.477435] ext4_buffered_write_iter+0x37d/0x460 [ 1350.478068] ext4_file_write_iter+0x3ff/0x1950 [ 1350.478698] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1350.479342] ? lock_is_held_type+0x9f/0x120 [ 1350.479929] do_iter_readv_writev+0x211/0x3c0 [ 1350.480511] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1350.481170] ? avc_policy_seqno+0x9/0x20 [ 1350.481711] ? security_file_permission+0xb5/0xe0 [ 1350.482350] do_iter_write+0x189/0x7e0 [ 1350.482871] vfs_writev+0x1ae/0x660 [ 1350.483366] ? __pfx_vfs_writev+0x10/0x10 [ 1350.483924] ? __fget_files+0x24e/0x480 [ 1350.484427] ? lock_release+0x1e3/0x680 [ 1350.484947] ? __fget_files+0x270/0x480 [ 1350.485461] __x64_sys_pwritev+0x233/0x310 [ 1350.486001] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1350.486626] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1350.487290] do_syscall_64+0x3f/0x90 [ 1350.487810] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1350.488467] RIP: 0033:0x7fb6935b7b19 [ 1350.488950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.491074] RSP: 002b:00007fb690b0c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1350.492044] RAX: ffffffffffffffda RBX: 00007fb6936cb020 RCX: 00007fb6935b7b19 [ 1350.492945] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1350.493837] RBP: 00007fb690b0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.494738] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1350.495617] R13: 00007ffcbdf3759f R14: 00007fb690b0c300 R15: 0000000000022000 [ 1350.496520] 19:07:39 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1350.525228] FAULT_INJECTION: forcing a failure. [ 1350.525228] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.526676] CPU: 1 PID: 8628 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1350.527662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.528649] Call Trace: [ 1350.528975] [ 1350.529273] dump_stack_lvl+0xc1/0xf0 [ 1350.529773] should_fail_ex+0x4b4/0x5b0 [ 1350.530284] ? ext4_mb_new_blocks+0x653/0x4670 [ 1350.530865] should_failslab+0x9/0x20 [ 1350.531343] kmem_cache_alloc+0x5a/0x390 [ 1350.531882] ext4_mb_new_blocks+0x653/0x4670 [ 1350.532443] ? mark_held_locks+0x9e/0xe0 [ 1350.532987] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 1350.533590] ? kasan_set_track+0x25/0x30 [ 1350.534103] ? __kasan_kmalloc+0x7f/0x90 [ 1350.534609] ? ext4_cache_extents+0x68/0x2d0 [ 1350.535166] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1350.535801] ? ext4_ext_search_right+0x2e3/0xbd0 [ 1350.536412] ? ext4_inode_to_goal_block+0x324/0x430 [ 1350.537060] ext4_ext_map_blocks+0x1e14/0x5970 [ 1350.537656] ? __pfx___lock_acquire+0x10/0x10 [ 1350.538214] ? __pfx___lock_acquire+0x10/0x10 [ 1350.538777] ? __lock_acquire+0x1936/0x63b0 [ 1350.539333] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1350.539980] ? ext4_map_blocks+0x704/0x19e0 [ 1350.540539] ? __pfx_lock_acquire+0x10/0x10 [ 1350.541091] ? lock_release+0x1e3/0x680 [ 1350.541601] ? __pfx_lock_release+0x10/0x10 [ 1350.542143] ? lock_is_held_type+0x9f/0x120 [ 1350.542581] loop3: detected capacity change from 0 to 40 [ 1350.542697] ? __pfx_down_write+0x10/0x10 [ 1350.543890] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1350.544526] ext4_map_blocks+0x776/0x19e0 [ 1350.545093] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1350.545701] ? kmem_cache_alloc+0x307/0x390 [ 1350.546281] ext4_do_writepages+0x1883/0x3020 [ 1350.546905] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1350.547542] ? lock_is_held_type+0x9f/0x120 [ 1350.548128] ext4_writepages+0x274/0x5e0 [ 1350.548655] ? __pfx_ext4_writepages+0x10/0x10 [ 1350.549254] ? __pfx___lock_acquire+0x10/0x10 [ 1350.549866] ? find_held_lock+0x2c/0x110 [ 1350.550421] ? __pfx_ext4_writepages+0x10/0x10 [ 1350.551029] do_writepages+0x1ad/0x650 [ 1350.551562] ? __pfx_do_writepages+0x10/0x10 [ 1350.552157] ? do_raw_spin_lock+0x125/0x270 [ 1350.552727] ? do_raw_spin_unlock+0x53/0x220 [ 1350.553313] ? _raw_spin_unlock+0x1e/0x40 [ 1350.553864] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1350.554567] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1350.555186] ? __pfx_lock_release+0x10/0x10 [ 1350.555767] __filemap_fdatawrite_range+0xba/0x100 [ 1350.556416] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1350.557143] ? ext4_buffered_write_iter+0x19c/0x460 [ 1350.557812] ? lock_release+0x1e3/0x680 [ 1350.558329] file_write_and_wait_range+0xd2/0x140 [ 1350.558966] ext4_sync_file+0x221/0xe30 [ 1350.559497] ? __pfx_ext4_sync_file+0x10/0x10 [ 1350.560089] vfs_fsync_range+0x141/0x230 [ 1350.560632] ext4_buffered_write_iter+0x37d/0x460 [ 1350.561273] ext4_file_write_iter+0x3ff/0x1950 [ 1350.561911] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1350.562581] ? lock_is_held_type+0x9f/0x120 [ 1350.563167] do_iter_readv_writev+0x211/0x3c0 [ 1350.563786] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1350.564435] ? avc_policy_seqno+0x9/0x20 [ 1350.564983] ? security_file_permission+0xb5/0xe0 [ 1350.565632] do_iter_write+0x189/0x7e0 [ 1350.566167] vfs_writev+0x1ae/0x660 [ 1350.566674] ? __pfx_vfs_writev+0x10/0x10 [ 1350.567227] ? __fget_files+0x24e/0x480 [ 1350.567760] ? lock_release+0x1e3/0x680 [ 1350.568305] ? __fget_files+0x270/0x480 [ 1350.568848] __x64_sys_pwritev+0x233/0x310 [ 1350.569426] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1350.570068] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1350.570771] do_syscall_64+0x3f/0x90 [ 1350.571283] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1350.571978] RIP: 0033:0x7f92c35cab19 [ 1350.572461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.574697] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1350.575644] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1350.576548] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1350.577428] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.578314] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1350.579200] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1350.580117] [ 1350.636849] FAULT_INJECTION: forcing a failure. [ 1350.636849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1350.638387] CPU: 0 PID: 8629 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1350.639372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.640379] Call Trace: [ 1350.640698] [ 1350.640988] dump_stack_lvl+0xc1/0xf0 [ 1350.641499] should_fail_ex+0x4b4/0x5b0 [ 1350.642001] prepare_alloc_pages+0x178/0x500 [ 1350.642568] __alloc_pages+0x149/0x480 [ 1350.643074] ? lock_acquire+0x19a/0x4c0 [ 1350.643566] ? __pfx___alloc_pages+0x10/0x10 [ 1350.644162] ? lock_release+0x1e3/0x680 [ 1350.644676] alloc_pages+0x1a0/0x260 [ 1350.645179] filemap_alloc_folio+0x374/0x410 [ 1350.645756] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1350.646405] ? lock_acquire+0x19a/0x4c0 [ 1350.646895] ? find_held_lock+0x2c/0x110 [ 1350.647420] ? folio_memcg_lock+0xf9/0x4b0 [ 1350.647992] __filemap_get_folio+0x285/0x8d0 [ 1350.648563] ? folio_memcg_unlock+0xbd/0x240 [ 1350.649144] pagecache_get_page+0x2e/0x120 [ 1350.649707] ? __pfx_fat_get_block+0x10/0x10 [ 1350.650271] block_write_begin+0x35/0x450 [ 1350.650819] cont_write_begin+0x4fe/0x700 [ 1350.651366] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1350.652182] ? __pfx_fat_get_block+0x10/0x10 [ 1350.652751] ? __pfx_cont_write_begin+0x10/0x10 [ 1350.653343] ? __mark_inode_dirty+0x249/0xc10 [ 1350.653950] ? generic_write_end+0x1fe/0x3d0 [ 1350.654529] fat_write_begin+0x89/0x180 [ 1350.655042] ? __pfx_fat_get_block+0x10/0x10 [ 1350.655619] cont_write_begin+0x2fc/0x700 [ 1350.656193] ? __pfx_fat_get_block+0x10/0x10 [ 1350.656765] ? __pfx_cont_write_begin+0x10/0x10 [ 1350.657357] ? lock_release+0x1e3/0x680 [ 1350.657872] ? __pfx_fault_in_readable+0x10/0x10 [ 1350.658480] fat_write_begin+0x89/0x180 [ 1350.658989] ? __pfx_fat_get_block+0x10/0x10 [ 1350.659559] generic_perform_write+0x25a/0x580 [ 1350.660181] ? __pfx_generic_perform_write+0x10/0x10 [ 1350.660836] ? __pfx_fat_update_time+0x10/0x10 [ 1350.661422] ? __pfx_file_update_time+0x10/0x10 [ 1350.662031] ? generic_write_checks+0x2c0/0x400 [ 1350.662639] __generic_file_write_iter+0x308/0x4b0 [ 1350.663278] generic_file_write_iter+0xe7/0x350 [ 1350.663895] do_iter_readv_writev+0x211/0x3c0 [ 1350.664481] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1350.665119] ? avc_policy_seqno+0x9/0x20 [ 1350.665660] ? security_file_permission+0xb5/0xe0 [ 1350.666288] do_iter_write+0x189/0x7e0 [ 1350.666815] vfs_writev+0x1ae/0x660 [ 1350.667306] ? __pfx_vfs_writev+0x10/0x10 [ 1350.667861] ? __fget_files+0x24e/0x480 [ 1350.668373] ? lock_release+0x1e3/0x680 [ 1350.668902] ? __fget_files+0x270/0x480 [ 1350.669437] __x64_sys_pwritev+0x233/0x310 [ 1350.669989] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1350.670612] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1350.671295] do_syscall_64+0x3f/0x90 [ 1350.671806] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1350.672478] RIP: 0033:0x7f4320699b19 [ 1350.672951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.675150] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1350.676104] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1350.676978] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1350.677857] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.678729] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1350.679607] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1350.680517] [ 1362.162858] loop6: detected capacity change from 0 to 40 19:07:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:07:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r1, r2, 0x0, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) r3 = open_tree(r2, &(0x7f0000000240)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x0, 0x7, 0x5, 0x0, 0xffff, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x7000, 0x5, 0x3ff, 0x4, 0x20, 0x20, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x6, r3, 0x8) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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", @ANYRES32=r2]) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x81, 0x0, 0x6, 0x0, 0x0, 0x3, 0x33034, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x3ff}, 0x2824, 0x2, 0x5, 0x0, 0x5, 0x101, 0x9, 0x0, 0xffffffff, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 19:07:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 31) 19:07:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 33) 19:07:51 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:07:51 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0xb) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="608e27af05b9d4a36463af0b2607b832b3db0a6128136e5c1d84d523f39d52dd36d309c4066fd0d28902e2b854128328f1f6cc6fcce32394ba497abe71402172689ad1f0dae3fe4298c2ff146ff56ffdb27346b78e4ac5"]) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20102, 0x20) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) 19:07:51 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:07:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 32) [ 1362.185222] loop3: detected capacity change from 0 to 40 [ 1362.231032] 9pnet_fd: Insufficient options for proto=fd [ 1362.237952] 9pnet_fd: Insufficient options for proto=fd [ 1362.239850] FAULT_INJECTION: forcing a failure. [ 1362.239850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1362.241469] CPU: 1 PID: 8647 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1362.242489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1362.243517] Call Trace: [ 1362.243854] [ 1362.244168] dump_stack_lvl+0xc1/0xf0 [ 1362.244690] should_fail_ex+0x4b4/0x5b0 [ 1362.245224] prepare_alloc_pages+0x178/0x500 [ 1362.245818] __alloc_pages+0x149/0x480 [ 1362.246338] ? lock_acquire+0x19a/0x4c0 [ 1362.246832] ? __pfx___alloc_pages+0x10/0x10 [ 1362.247409] ? lock_release+0x1e3/0x680 [ 1362.247927] alloc_pages+0x1a0/0x260 [ 1362.248449] filemap_alloc_folio+0x374/0x410 [ 1362.249052] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1362.249706] ? lock_acquire+0x19a/0x4c0 [ 1362.250219] ? find_held_lock+0x2c/0x110 [ 1362.250766] ? folio_memcg_lock+0xf9/0x4b0 [ 1362.251337] __filemap_get_folio+0x285/0x8d0 [ 1362.251933] ? folio_memcg_unlock+0xbd/0x240 [ 1362.252527] pagecache_get_page+0x2e/0x120 [ 1362.253096] ? __pfx_fat_get_block+0x10/0x10 [ 1362.253644] block_write_begin+0x35/0x450 [ 1362.254199] cont_write_begin+0x4fe/0x700 [ 1362.254753] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1362.255585] ? __pfx_fat_get_block+0x10/0x10 [ 1362.256166] ? __pfx_cont_write_begin+0x10/0x10 [ 1362.256787] ? __mark_inode_dirty+0x249/0xc10 [ 1362.257409] ? generic_write_end+0x1fe/0x3d0 [ 1362.258001] fat_write_begin+0x89/0x180 [ 1362.258520] ? __pfx_fat_get_block+0x10/0x10 [ 1362.259100] cont_write_begin+0x2fc/0x700 [ 1362.259633] ? __pfx_fat_get_block+0x10/0x10 [ 1362.260230] ? __pfx_cont_write_begin+0x10/0x10 [ 1362.260842] ? lock_release+0x1e3/0x680 [ 1362.261366] ? __pfx_fault_in_readable+0x10/0x10 [ 1362.261982] fat_write_begin+0x89/0x180 [ 1362.262507] ? __pfx_fat_get_block+0x10/0x10 [ 1362.263095] generic_perform_write+0x25a/0x580 [ 1362.263721] ? __pfx_generic_perform_write+0x10/0x10 [ 1362.264422] ? __pfx_fat_update_time+0x10/0x10 [ 1362.265032] ? __pfx_file_update_time+0x10/0x10 [ 1362.265641] ? generic_write_checks+0x2c0/0x400 [ 1362.266266] __generic_file_write_iter+0x308/0x4b0 [ 1362.266923] generic_file_write_iter+0xe7/0x350 [ 1362.267555] do_iter_readv_writev+0x211/0x3c0 [ 1362.268163] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1362.268814] ? avc_policy_seqno+0x9/0x20 [ 1362.269353] ? security_file_permission+0xb5/0xe0 [ 1362.270012] do_iter_write+0x189/0x7e0 [ 1362.270548] vfs_writev+0x1ae/0x660 [ 1362.271052] ? __pfx_vfs_writev+0x10/0x10 [ 1362.271576] ? __fget_files+0x24e/0x480 [ 1362.272126] ? lock_release+0x1e3/0x680 [ 1362.272683] ? __fget_files+0x270/0x480 [ 1362.273218] __x64_sys_pwritev+0x233/0x310 [ 1362.273789] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1362.274393] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1362.275087] do_syscall_64+0x3f/0x90 [ 1362.275581] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1362.276267] RIP: 0033:0x7f4320699b19 [ 1362.276730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1362.278977] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1362.279897] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1362.280787] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1362.281678] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.282582] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1362.283483] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1362.284413] [ 1362.290750] syz-executor.6: attempt to access beyond end of device [ 1362.290750] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:07:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 33) 19:07:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',\a\x00\x00\x00o=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 19:07:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 34) 19:07:51 executing program 4: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0xf4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x12a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}]}}, @CTA_PROTOINFO={0x64, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x60, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x67}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x80}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1f}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7f}]}}]}, 0xf4}}, 0x40880) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xd5, 0x0, 0x4, 0x80, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf9, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x40403, 0xffffffffffff8001, 0x1, 0x8, 0xffffffffffffffff, 0x100, 0x0, 0x0, 0x2, 0x0, 0x80000001}, 0x0, 0xc, r0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1362.390292] FAULT_INJECTION: forcing a failure. [ 1362.390292] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.392058] CPU: 0 PID: 8663 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1362.393083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1362.394119] Call Trace: [ 1362.394464] [ 1362.394767] dump_stack_lvl+0xc1/0xf0 [ 1362.395292] should_fail_ex+0x4b4/0x5b0 [ 1362.395819] ? __es_insert_extent+0x3a9/0x12f0 [ 1362.396430] should_failslab+0x9/0x20 [ 1362.396923] kmem_cache_alloc+0x5a/0x390 [ 1362.397474] __es_insert_extent+0x3a9/0x12f0 [ 1362.398100] ext4_es_insert_extent+0x2db/0xb30 [ 1362.398729] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1362.399412] ? percpu_counter_add_batch+0xc8/0x180 [ 1362.400070] ? do_raw_read_unlock+0x44/0xe0 [ 1362.400646] ? ext4_es_lookup_extent+0xc8/0xad0 [ 1362.401283] ext4_map_blocks+0xa0d/0x19e0 [ 1362.401851] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1362.402462] ? kmem_cache_alloc+0x307/0x390 [ 1362.403052] ext4_do_writepages+0x1883/0x3020 [ 1362.403686] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1362.404314] ? lock_is_held_type+0x9f/0x120 [ 1362.404891] ext4_writepages+0x274/0x5e0 [ 1362.405418] ? __pfx_ext4_writepages+0x10/0x10 [ 1362.406026] ? __pfx___lock_acquire+0x10/0x10 [ 1362.406614] ? find_held_lock+0x2c/0x110 [ 1362.407159] ? __pfx_ext4_writepages+0x10/0x10 [ 1362.407728] do_writepages+0x1ad/0x650 [ 1362.408266] ? __pfx_do_writepages+0x10/0x10 [ 1362.408831] ? do_raw_spin_lock+0x125/0x270 [ 1362.409392] ? do_raw_spin_unlock+0x53/0x220 [ 1362.409949] ? _raw_spin_unlock+0x1e/0x40 [ 1362.410492] ? wbc_attach_and_unlock_inode+0x4a3/0x910 [ 1362.411159] filemap_fdatawrite_wbc+0x14b/0x1b0 [ 1362.411771] ? __pfx_lock_release+0x10/0x10 [ 1362.412331] __filemap_fdatawrite_range+0xba/0x100 [ 1362.412973] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1362.413660] ? ext4_buffered_write_iter+0x19c/0x460 [ 1362.414314] ? lock_release+0x1e3/0x680 [ 1362.414821] file_write_and_wait_range+0xd2/0x140 [ 1362.415445] ext4_sync_file+0x221/0xe30 [ 1362.415940] ? __pfx_ext4_sync_file+0x10/0x10 [ 1362.416520] vfs_fsync_range+0x141/0x230 [ 1362.417036] ext4_buffered_write_iter+0x37d/0x460 [ 1362.417682] ext4_file_write_iter+0x3ff/0x1950 [ 1362.418284] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1362.418952] ? lock_is_held_type+0x9f/0x120 [ 1362.419509] do_iter_readv_writev+0x211/0x3c0 [ 1362.420108] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1362.420750] ? avc_policy_seqno+0x9/0x20 [ 1362.421292] ? security_file_permission+0xb5/0xe0 [ 1362.421931] do_iter_write+0x189/0x7e0 [ 1362.422461] vfs_writev+0x1ae/0x660 [ 1362.422948] ? __pfx_vfs_writev+0x10/0x10 [ 1362.423493] ? __fget_files+0x24e/0x480 [ 1362.424032] ? lock_release+0x1e3/0x680 [ 1362.424572] ? __fget_files+0x270/0x480 [ 1362.425112] __x64_sys_pwritev+0x233/0x310 [ 1362.425655] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1362.426286] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1362.426988] do_syscall_64+0x3f/0x90 [ 1362.427496] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1362.428189] RIP: 0033:0x7f92c35cab19 [ 1362.428679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1362.430913] RSP: 002b:00007f92c0b40188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1362.431849] RAX: ffffffffffffffda RBX: 00007f92c36ddf60 RCX: 00007f92c35cab19 [ 1362.432744] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1362.433627] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.434516] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1362.435402] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1362.436347] 19:07:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 32) 19:07:51 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1362.480060] 9pnet_fd: Insufficient options for proto=fd 19:07:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r1, r2, 0x0, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) r3 = open_tree(r2, &(0x7f0000000240)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x0, 0x7, 0x5, 0x0, 0xffff, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x7000, 0x5, 0x3ff, 0x4, 0x20, 0x20, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x6, r3, 0x8) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYBLOB="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", @ANYRES32=r2]) [ 1362.496195] 9pnet_fd: Insufficient options for proto=fd [ 1362.514261] loop6: detected capacity change from 0 to 40 [ 1362.527842] loop3: detected capacity change from 0 to 40 [ 1362.549075] FAULT_INJECTION: forcing a failure. [ 1362.549075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1362.550632] CPU: 1 PID: 8671 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1362.551666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1362.552746] Call Trace: [ 1362.553091] [ 1362.553387] dump_stack_lvl+0xc1/0xf0 [ 1362.553910] should_fail_ex+0x4b4/0x5b0 [ 1362.554436] prepare_alloc_pages+0x178/0x500 [ 1362.555027] __alloc_pages+0x149/0x480 [ 1362.555550] ? lock_acquire+0x19a/0x4c0 [ 1362.556080] ? __pfx___alloc_pages+0x10/0x10 [ 1362.556671] ? lock_release+0x1e3/0x680 [ 1362.557206] alloc_pages+0x1a0/0x260 [ 1362.557723] filemap_alloc_folio+0x374/0x410 [ 1362.558328] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1362.558963] ? lock_acquire+0x19a/0x4c0 [ 1362.559478] ? find_held_lock+0x2c/0x110 [ 1362.560037] ? folio_memcg_lock+0xf9/0x4b0 [ 1362.560612] __filemap_get_folio+0x285/0x8d0 [ 1362.561191] ? folio_memcg_unlock+0xbd/0x240 [ 1362.561778] pagecache_get_page+0x2e/0x120 [ 1362.562356] ? __pfx_fat_get_block+0x10/0x10 [ 1362.562946] block_write_begin+0x35/0x450 [ 1362.563498] cont_write_begin+0x4fe/0x700 [ 1362.564060] ? __block_commit_write.constprop.0.isra.0+0x261/0x2c0 [ 1362.564874] ? __pfx_fat_get_block+0x10/0x10 [ 1362.565452] ? __pfx_cont_write_begin+0x10/0x10 [ 1362.566058] ? __mark_inode_dirty+0x249/0xc10 [ 1362.566661] ? generic_write_end+0x1fe/0x3d0 [ 1362.567243] fat_write_begin+0x89/0x180 [ 1362.567759] ? __pfx_fat_get_block+0x10/0x10 [ 1362.568361] cont_write_begin+0x5c8/0x700 [ 1362.568916] ? __pfx_fat_get_block+0x10/0x10 [ 1362.569474] ? __pfx_cont_write_begin+0x10/0x10 [ 1362.570084] ? lock_release+0x1e3/0x680 [ 1362.570608] ? __pfx_fault_in_readable+0x10/0x10 [ 1362.571225] fat_write_begin+0x89/0x180 [ 1362.571741] ? __pfx_fat_get_block+0x10/0x10 [ 1362.572325] generic_perform_write+0x25a/0x580 [ 1362.572938] ? __pfx_generic_perform_write+0x10/0x10 [ 1362.573601] ? __pfx_fat_update_time+0x10/0x10 [ 1362.574195] ? __pfx_file_update_time+0x10/0x10 [ 1362.574806] ? generic_write_checks+0x2c0/0x400 [ 1362.575417] __generic_file_write_iter+0x308/0x4b0 [ 1362.576064] generic_file_write_iter+0xe7/0x350 [ 1362.576653] do_iter_readv_writev+0x211/0x3c0 [ 1362.577232] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1362.577851] ? avc_policy_seqno+0x9/0x20 [ 1362.578369] ? security_file_permission+0xb5/0xe0 [ 1362.578998] do_iter_write+0x189/0x7e0 [ 1362.579516] vfs_writev+0x1ae/0x660 [ 1362.580002] ? __pfx_vfs_writev+0x10/0x10 [ 1362.580523] ? __fget_files+0x24e/0x480 [ 1362.581017] ? lock_release+0x1e3/0x680 [ 1362.581528] ? __fget_files+0x270/0x480 [ 1362.582052] __x64_sys_pwritev+0x233/0x310 [ 1362.582590] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1362.583185] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1362.583841] do_syscall_64+0x3f/0x90 [ 1362.584367] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1362.585036] RIP: 0033:0x7fb6935b7b19 [ 1362.585492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1362.587607] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1362.588521] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1362.589366] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1362.590204] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.591054] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1362.591919] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1362.592781] [ 1362.595002] syz-executor.3: attempt to access beyond end of device [ 1362.595002] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:07:51 executing program 4: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0xf4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x12a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}]}}, @CTA_PROTOINFO={0x64, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x60, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x67}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x80}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1f}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7f}]}}]}, 0xf4}}, 0x40880) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xd5, 0x0, 0x4, 0x80, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf9, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x40403, 0xffffffffffff8001, 0x1, 0x8, 0xffffffffffffffff, 0x100, 0x0, 0x0, 0x2, 0x0, 0x80000001}, 0x0, 0xc, r0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:07:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00']) 19:08:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 33) 19:08:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 35) 19:08:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 34) 19:08:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00']) 19:08:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r1, r2, 0x0, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) r3 = open_tree(r2, &(0x7f0000000240)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x0, 0x7, 0x5, 0x0, 0xffff, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x7000, 0x5, 0x3ff, 0x4, 0x20, 0x20, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x6, r3, 0x8) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:08:04 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:08:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xff) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:08:04 executing program 4: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0xf4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x12a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}]}}, @CTA_PROTOINFO={0x64, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x60, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x67}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x80}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1f}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7f}]}}]}, 0xf4}}, 0x40880) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xd5, 0x0, 0x4, 0x80, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf9, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x40403, 0xffffffffffff8001, 0x1, 0x8, 0xffffffffffffffff, 0x100, 0x0, 0x0, 0x2, 0x0, 0x80000001}, 0x0, 0xc, r0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 1375.441419] loop3: detected capacity change from 0 to 40 [ 1375.445117] loop6: detected capacity change from 0 to 40 19:08:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 35) 19:08:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x2) accept4(r0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x5a8c000, &(0x7f00000001c0)=ANY=[]) [ 1375.496924] syz-executor.3: attempt to access beyond end of device [ 1375.496924] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1375.500704] syz-executor.6: attempt to access beyond end of device [ 1375.500704] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:08:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 36) 19:08:04 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:08:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r1, r2, 0x0, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) r3 = open_tree(r2, &(0x7f0000000240)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x0, 0x7, 0x5, 0x0, 0xffff, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x7000, 0x5, 0x3ff, 0x4, 0x20, 0x20, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x6, r3, 0x8) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 19:08:04 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:08:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 34) 19:08:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 36) 19:08:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 37) [ 1375.644556] loop3: detected capacity change from 0 to 40 [ 1375.652806] loop6: detected capacity change from 0 to 40 [ 1375.670127] syz-executor.3: attempt to access beyond end of device [ 1375.670127] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1375.679085] syz-executor.6: attempt to access beyond end of device [ 1375.679085] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 19:08:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r1, r2, 0x0, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) r3 = open_tree(r2, &(0x7f0000000240)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x0, 0x7, 0x5, 0x0, 0xffff, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x7000, 0x5, 0x3ff, 0x4, 0x20, 0x20, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x6, r3, 0x8) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 19:08:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 35) 19:08:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000180)="87d12c34da33d498da5d17f1ef62f36742067d6f7e6413fc03a2410337c8004bb03520e852ffd083078a810241a938ef65bbe59b34336fafb680f5da5a0a27e4b75c547383d3cf7051c6a853b5321d5e736380c5549c9867b28b1078adf18573ac6e62ad6baa0844ac465cf6a59aa4d773e2a3bde51d0992bb11fed709aa82fc72269e947e97799aaaf190b166fae9815f49be9c72312eec61ee271ac693ca2390aa6fad43611507bb42faead0cb", 0xae, 0x7fd}, {&(0x7f0000000240)="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", 0xfd, 0x50}, {&(0x7f0000000340)="3bc5e596fe5c302a7650385175bc7e1f7fb4953ff2f4d2968c582754381b576bf2fd8f19e80b326617ec365ca83910fa0d482ff2e02c6be24b140c6f7fa88d849574c5967182225a6bd882b32621b6b29e1a9d3ff366c908880982ff75e8dee79a7267ecbb3581a9bc5903edbcea514f35bf8e1ad2ba3831678328274db5a764beae1445a85e4569771ea3e6c5401471d55b6f8b5f54e8e7d0be4d630e505bc00f9a1713c2b23c02e57b08594f8216288805caede54ece816d8272efb3e3530f32", 0xc1}], 0x2a40020, &(0x7f00000004c0)={[{@dioread_nolock}, {@grpquota}, {@oldalloc}, {@quota}, {@dax}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19:08:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x8}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:08:23 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:08:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 37) 19:08:23 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:08:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 38) [ 1394.442056] loop3: detected capacity change from 0 to 40 [ 1394.452166] loop5: detected capacity change from 0 to 64 [ 1394.459767] loop5: detected capacity change from 0 to 64 [ 1394.469956] syz-executor.3: attempt to access beyond end of device [ 1394.469956] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1394.479624] loop6: detected capacity change from 0 to 40 19:08:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 36) [ 1394.542889] loop3: detected capacity change from 0 to 40 [ 1394.543751] FAULT_INJECTION: forcing a failure. [ 1394.543751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.545575] CPU: 1 PID: 8757 Comm: syz-executor.6 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1394.546772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1394.547976] Call Trace: [ 1394.548405] [ 1394.548762] dump_stack_lvl+0xc1/0xf0 [ 1394.549376] should_fail_ex+0x4b4/0x5b0 [ 1394.549988] copyin+0x19/0x120 [ 1394.550491] copy_page_from_iter_atomic+0x272/0x1350 [ 1394.551250] ? __pfx_fat_get_block+0x10/0x10 [ 1394.551899] ? __pfx_cont_write_begin+0x10/0x10 [ 1394.552624] ? lock_release+0x1e3/0x680 [ 1394.553204] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 1394.554033] ? __pfx_fault_in_readable+0x10/0x10 [ 1394.554732] ? fat_write_begin+0x95/0x180 [ 1394.555353] ? __pfx_fat_get_block+0x10/0x10 [ 1394.556001] generic_perform_write+0x2cf/0x580 [ 1394.556742] ? __pfx_generic_perform_write+0x10/0x10 [ 1394.557486] ? __pfx_fat_update_time+0x10/0x10 [ 1394.558172] ? __pfx_file_update_time+0x10/0x10 [ 1394.558856] ? generic_write_checks+0x2c0/0x400 [ 1394.559561] __generic_file_write_iter+0x308/0x4b0 [ 1394.560273] generic_file_write_iter+0xe7/0x350 [ 1394.560993] do_iter_readv_writev+0x211/0x3c0 [ 1394.561682] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1394.562439] ? avc_policy_seqno+0x9/0x20 [ 1394.563063] ? security_file_permission+0xb5/0xe0 [ 1394.563834] do_iter_write+0x189/0x7e0 [ 1394.564474] vfs_writev+0x1ae/0x660 [ 1394.565040] ? __pfx_vfs_writev+0x10/0x10 [ 1394.565675] ? __fget_files+0x24e/0x480 [ 1394.566284] ? lock_release+0x1e3/0x680 [ 1394.566901] ? __fget_files+0x270/0x480 [ 1394.567536] __x64_sys_pwritev+0x233/0x310 [ 1394.568198] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1394.568954] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1394.569763] do_syscall_64+0x3f/0x90 [ 1394.570327] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1394.571121] RIP: 0033:0x7fb6935b7b19 [ 1394.571647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1394.574168] RSP: 002b:00007fb690b2d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1394.575216] RAX: ffffffffffffffda RBX: 00007fb6936caf60 RCX: 00007fb6935b7b19 [ 1394.576217] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1394.577210] RBP: 00007fb690b2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1394.578198] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1394.579239] R13: 00007ffcbdf3759f R14: 00007fb690b2d300 R15: 0000000000022000 [ 1394.580313] [ 1394.596154] syz-executor.3: attempt to access beyond end of device [ 1394.596154] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:08:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 39) [ 1394.625523] FAULT_INJECTION: forcing a failure. [ 1394.625523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.626711] CPU: 0 PID: 8766 Comm: syz-executor.1 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1394.627266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1394.627894] Call Trace: [ 1394.628082] [ 1394.628253] dump_stack_lvl+0xc1/0xf0 [ 1394.628556] should_fail_ex+0x4b4/0x5b0 [ 1394.628846] _copy_to_user+0x2e/0x150 [ 1394.629125] simple_read_from_buffer+0xd0/0x170 [ 1394.629452] proc_fail_nth_read+0x19c/0x230 [ 1394.629769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.630109] ? security_file_permission+0xb5/0xe0 [ 1394.630445] vfs_read+0x260/0x930 [ 1394.630708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.631057] ? __pfx_vfs_read+0x10/0x10 [ 1394.631358] ? __fget_files+0x270/0x480 [ 1394.631658] ksys_read+0x12b/0x260 [ 1394.631882] syz-executor.6: attempt to access beyond end of device [ 1394.631882] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1394.631909] ? __pfx_ksys_read+0x10/0x10 [ 1394.633797] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1394.634165] do_syscall_64+0x3f/0x90 [ 1394.634450] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1394.634802] RIP: 0033:0x7f92c357d69c [ 1394.635051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1394.636267] RSP: 002b:00007f92c0b40170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1394.636781] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f92c357d69c [ 1394.637277] RDX: 000000000000000f RSI: 00007f92c0b401e0 RDI: 0000000000000004 [ 1394.637764] RBP: 00007f92c0b401d0 R08: 0000000000000000 R09: 0000000000000000 [ 1394.638245] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1394.638737] R13: 00007ffca8b3910f R14: 00007f92c0b40300 R15: 0000000000022000 [ 1394.639229] 19:08:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 37) 19:08:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 38) 19:08:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r0, r1, 0x0, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) r2 = open_tree(r1, &(0x7f0000000240)='./file1\x00', 0x1000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x0, 0x7, 0x5, 0x0, 0xffff, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x7000, 0x5, 0x3ff, 0x4, 0x20, 0x20, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffff7}, 0x0, 0x6, r2, 0x8) [ 1406.448548] loop3: detected capacity change from 0 to 40 19:08:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) 19:08:35 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:08:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xff) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:08:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = fork() wait4(r0, &(0x7f0000000240), 0x8, 0x0) tgkill(r0, r0, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x80000001) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x80, 0x7, 0x9, 0x0, 0x0, 0x400, 0x44043, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x8001, 0x1}, 0x200, 0x9, 0x0, 0x7, 0xfffffffffffffffa, 0x1, 0xb75, 0x0, 0x9, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000300)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r2, r3, 0x0, 0x2) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x2, 0x7f, 0x8d, 0x81, 0x0, 0x9, 0x2000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x38, 0x2, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x2, 0x400, 0x0, 0x22e71557, 0x2, 0xf4, 0x0, 0xd2, 0x0, 0x2}, 0x0, 0x9, r3, 0x1) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 19:08:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/203, 0xcb}, {&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f00000004c0)=""/164, 0xa4}], 0x6, &(0x7f0000000600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000940)=""/157, 0x9d}], 0x4}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/147, 0x93}], 0x1, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000000bc0), 0x0, &(0x7f0000000d40)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000d80)=""/194, 0xc2}, {&(0x7f0000000e80)=""/121, 0x79}, {&(0x7f0000000f00)=""/113, 0x71}, {&(0x7f0000000f80)=""/193, 0xc1}, {&(0x7f0000001080)=""/104, 0x68}, {&(0x7f0000001100)=""/135, 0x87}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/223, 0xdf}, {&(0x7f00000022c0)=""/192, 0xc0}, {&(0x7f0000002380)=""/178, 0xb2}], 0xa, &(0x7f0000002500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002580), 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002600)=""/230, 0xe6}, {&(0x7f0000002700)=""/236, 0xec}, {&(0x7f0000002800)=""/215, 0xd7}, {&(0x7f0000002900)=""/4, 0x4}, {&(0x7f0000002940)=""/196, 0xc4}, {&(0x7f0000002a40)=""/215, 0xd7}], 0x6}}, {{&(0x7f0000002bc0), 0x6e, &(0x7f0000003240)=[{&(0x7f0000002c40)=""/137, 0x89}, {&(0x7f0000002d00)=""/65, 0x41}, {&(0x7f0000002d80)}, {&(0x7f0000002dc0)=""/233, 0xe9}, {&(0x7f0000002ec0)=""/148, 0x94}, {&(0x7f0000002f80)=""/218, 0xda}, {&(0x7f0000003080)=""/192, 0xc0}, {&(0x7f0000003140)=""/223, 0xdf}], 0x8, &(0x7f00000032c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000000780), 0x0, &(0x7f00000044c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004500), 0x6e, &(0x7f0000004780)}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/177, 0xb1}, {&(0x7f0000004900)=""/153, 0x99}], 0x2, &(0x7f00000033c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x158}}], 0xa, 0x220, &(0x7f0000004dc0)={0x77359400}) fstat(0xffffffffffffffff, &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(r1, r2, 0x0, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000004f00)=ANY=[@ANYBLOB="0300000000000000000800000000000001000000070000000200000000000000c1000000000000000500000000000000040000000000000000000000000000000000000000000000000400000000000000000000009b1e11c4368aabfbf0000000ff07000000000000ca0c0000000000000400"/144]) sendfile(r3, r4, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000c00)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000004e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@version_9p2000}, {@fscache}, {@access_uid={'access', 0x3d, r0}}]}}) [ 1406.465208] loop6: detected capacity change from 0 to 40 [ 1406.491316] FAULT_INJECTION: forcing a failure. [ 1406.491316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.492189] CPU: 0 PID: 8775 Comm: syz-executor.3 Not tainted 6.3.0-rc5-next-20230406 #1 [ 1406.492721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.493250] Call Trace: [ 1406.493425] [ 1406.493584] dump_stack_lvl+0xc1/0xf0 [ 1406.493859] should_fail_ex+0x4b4/0x5b0 [ 1406.494135] copyin+0x19/0x120 [ 1406.494361] copy_page_from_iter_atomic+0x272/0x1350 [ 1406.494706] ? __pfx_fat_get_block+0x10/0x10 [ 1406.495007] ? __pfx_cont_write_begin+0x10/0x10 [ 1406.495324] ? lock_release+0x1e3/0x680 [ 1406.495594] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 1406.495957] ? __pfx_fault_in_readable+0x10/0x10 [ 1406.496283] ? fat_write_begin+0x95/0x180 [ 1406.496569] ? __pfx_fat_get_block+0x10/0x10 [ 1406.496870] generic_perform_write+0x2cf/0x580 [ 1406.497199] ? __pfx_generic_perform_write+0x10/0x10 [ 1406.497546] ? __pfx_fat_update_time+0x10/0x10 [ 1406.497859] ? __pfx_file_update_time+0x10/0x10 [ 1406.498180] ? generic_write_checks+0x2c0/0x400 [ 1406.498500] __generic_file_write_iter+0x308/0x4b0 [ 1406.498835] generic_file_write_iter+0xe7/0x350 [ 1406.499154] do_iter_readv_writev+0x211/0x3c0 [ 1406.499467] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1406.499806] ? avc_policy_seqno+0x9/0x20 [ 1406.500092] ? security_file_permission+0xb5/0xe0 [ 1406.500432] do_iter_write+0x189/0x7e0 [ 1406.500732] vfs_writev+0x1ae/0x660 [ 1406.500993] ? __pfx_vfs_writev+0x10/0x10 [ 1406.501290] ? __fget_files+0x24e/0x480 [ 1406.501559] ? lock_release+0x1e3/0x680 [ 1406.501848] ? __fget_files+0x270/0x480 [ 1406.502127] __x64_sys_pwritev+0x233/0x310 [ 1406.502433] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1406.502766] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1406.503130] do_syscall_64+0x3f/0x90 [ 1406.503404] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1406.503772] RIP: 0033:0x7f4320699b19 [ 1406.504028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.505290] RSP: 002b:00007f431dc0f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1406.505803] RAX: ffffffffffffffda RBX: 00007f43207acf60 RCX: 00007f4320699b19 [ 1406.506289] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1406.506767] RBP: 00007f431dc0f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1406.507271] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1406.507781] R13: 00007ffc2e2f382f R14: 00007f431dc0f300 R15: 0000000000022000 [ 1406.508285] [ 1406.516365] syz-executor.6: attempt to access beyond end of device [ 1406.516365] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1406.545461] syz-executor.3: attempt to access beyond end of device [ 1406.545461] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:08:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 39) 19:08:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x2}], 0x1, 0x8001, 0x0) 19:08:35 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1406.614506] loop6: detected capacity change from 0 to 40 19:08:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 38) [ 1406.636485] syz-executor.6: attempt to access beyond end of device [ 1406.636485] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1406.672392] loop3: detected capacity change from 0 to 40 19:08:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r0, r1, 0x0, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) open_tree(r1, &(0x7f0000000240)='./file1\x00', 0x1000) 19:08:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 40) [ 1406.701324] syz-executor.3: attempt to access beyond end of device [ 1406.701324] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:08:35 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 19:08:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x3}], 0x1, 0x8001, 0x0) 19:08:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 39) [ 1406.768595] loop6: detected capacity change from 0 to 40 19:08:35 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1406.802326] syz-executor.6: attempt to access beyond end of device [ 1406.802326] loop6: rw=2049, sector=92, nr_sectors = 4 limit=40 [ 1406.843513] loop3: detected capacity change from 0 to 40 19:08:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xce59, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000380)=""/39) sendfile(r0, r1, 0x0, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x2) 19:08:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 41) [ 1406.872296] syz-executor.3: attempt to access beyond end of device [ 1406.872296] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:08:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x4}], 0x1, 0x8001, 0x0) 19:08:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) (fail_nth: 40) [ 1406.957013] loop3: detected capacity change from 0 to 40 [ 1406.967076] syz-executor.3: attempt to access beyond end of device [ 1406.967076] loop3: rw=2049, sector=92, nr_sectors = 4 limit=40 19:08:35 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fremovexattr(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1416.489483] Bluetooth: hci1: command 0x0406 tx timeout VM DIAGNOSIS: 19:13:42 Registers: info registers vcpu 0 RAX=00000000006e6e71 RBX=0000000000000000 RCX=ffffffff844833fe RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812858e5 RBP=dffffc0000000000 RSP=ffffffff85407e30 R8 =0000000000000001 R9 =ffff88806ce34fc3 R10=ffffed100d9c69f8 R11=0000000000000001 R12=ffffffff85d27cd0 R13=1ffffffff0a80fcb R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8448441f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c512a60628 CR3=000000000dcd0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000020000000000000002 XMM02=0201039aff1500c801fe016c6c6f502e XMM03=000000000201dfeb23befc63e844f3fc XMM04=756365786511006c61746f7420636578 XMM05=78650800737472617473657220726f74 XMM06=7a7566206365786509006e6567206365 XMM07=74616469646e616320636578650e007a XMM08=65657320636578650a0073746e696820 XMM09=11006c61746f7420636578650a007364 XMM10=7472617473657220726f747563657865 XMM11=65786509006e65672063657865080073 XMM12=6e616320636578650e007a7a75662063 XMM13=69727420636578650b00657461646964 XMM14=696d696e696d20636578650d00656761 XMM15=00006873616d7320636578650a00657a info registers vcpu 1 RAX=00000000006a412b RBX=0000000000000001 RCX=ffffffff844833fe RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812858e5 RBP=dffffc0000000000 RSP=ffff888008dc7e68 R8 =0000000000000001 R9 =ffff88806cf34fc3 R10=ffffed100d9e69f8 R11=0000000000000001 R12=ffffffff85d27cd0 R13=1ffff110011b8fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8448441f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9936246010 CR3=000000000dcd0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004156bb6400000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000