erf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1251.196484] loop5: detected capacity change from 0 to 40 [ 1251.200744] loop3: detected capacity change from 0 to 40 [ 1251.218406] loop4: detected capacity change from 0 to 40 22:25:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8fca01b49ff40f4bd4800649b0c034e8de5f2d48af1b2ac7fae73597a11fbd1ab0acb472ab27b87601dc60ae8d4df8c8dd7e2aae7882ab290e6ef1551911c139b19eee19a7f21e97d901a86f8af2ab70c82ec15680e18ac2790f762ee599e66875d5c19f768bd6bbded20b7ef9b07d80d01eb5041f7d23c5525e9e2e2e9bc915b400387fb9b3b538a0bd5c6abd3054a7f077acc016790d9cf32f29a98a78b6f0c6a110ed6e1a8a0c700d928690a41e20db8f86529b132b5f8b321399f2b086d9121c01ca2059a89365e8ac2e3966ccdf2fd71b5202b4d8492688fde2581bb39400759b4f60d22a591ebdec3d496ba71cc4e65caf64151f8eaec9a9e841aeedb838c9d2706373d36bbbfff1957d81e165b1242126a2639a154b6737868f8e3652589ce2ca0009127395f969643ed7a9f62305a6991bf1a49e37792c08318afcf0beb459ad81acae9d302f764beaa4ec9c65d1def6be8cf18c88bcad1479def296bd3257b7d1b9c4ca51857c552bd29e35113ff2d3a06e75e00bdf4eee7bc1494bf47e90145870707f3749ff6d3b0d6d1779c861fbad7ec60cbf8e40410fc14cc66f65a361886f4b998f07719396a64aa804cecb1123695c059b60caa1f7d7215cda8c70406e2a79cd2d95e4b7dc435db61f00f117163580b613c37ec812ea41ddaed8a80c261b901e23392bf138ac25cd0f65f6b16187d5db53ef242d710ca777cbd1b2a825738ec6beb321cd759b3c9280971ca89818c603b2c6ed4bbb38eba55e9770743738953a687a969fd120b6f91cf89f233382179bc0854c2dedced1f74ff6f67cf50bb5b43dedfe3202c094bf482ae8b115f3e0ddfcb0e56c8b1d657b6667867eeaced7c50c8e065ed5aec7d0f6ea7a07d2fc80bfb1871c1e75e8ed4fe1c6b19dfa58e476bd6c8edc3b738926c91e2d099603997eed299f197ffd461eb567e208eecb15a00e68fdca33bb3114f430bb24431232c4a90635572c7c0fc07ec56d419df9243ad7a7dfc3527558f27a90908fbe91f0cb2bcbc41252a55911b75880aacbcb6e21746f2d3bf9679231555a98bf8534b7834e4de2b669ee9ceb6f1f5364cbec9445e9e576b5d28f2c830652244dbc50d219f8d14c147dfc754eae81613d0241ac2bec5ef427b288171a7d7ae973280f82bcc3655deeba85b5b66eb74800f65edb3658acc2959894ea95ddaca55a921499647de7d63fe0f078cc891b9b4c24e85e9cdced4563ed6c8217a0878d29e184e3222c441496ec0b001f6dd8b47b10e46f16b91aeb5bf61edf1054885fcd8f9ff71cf0e974c066386348db23ccaeb645a1caae647489bd6b99abf0935ea094df579d5cbc7c76a92552ef464ce78ddd08dc834a265c6029cbb2210070990eaf12da301a26955a859bc04d700ba4e9ff2e1028152b39ff20bfbcd3da18532d2991d82dafb4b13dfc452d0196f8bc202fd0ce478bbfe1795db496a0b93a3176ce27f12fa6b3876e8df3ec070f77929278351e00afdc892957dab2954f9f99787283f8bfee6a270711f366c6f22586108eb92ea6f5ee57959ae053c51c6469a987cb3a2f267dda34a2400cb6679055cbce20da58179fb44cdb1d82f963a5c43464ebec1163ca38009bd811e1ae10fcc56277bf4b9dc3e4e6b6a3051c180cfce8fd2880309b0547d929c7152f064a0454d84554350aee1b7680fbf8ac73c4d4e1a196229d7a94d0ffa623e600137612486f6ca4642b631a522470f649d9c053b9895ec78e0b6745d149161a93e7b10e93679489979ca903d1cd0fc28a6b9e143bec99acfe51b444b8fc66de723bbc2041f83e32e696ad7ee4f82e592232521c00336195774ec1160ef66d751566277cce70f262c9d68577d9e3e6e567979f065124690149cb73efdccfb1ec69edcf4a6443e1a46c2f1ba5206ea425bb218be50c44463d7cf4d7a5c18337cbc2e46fc934961b1123149c33acc4cec313088bdd111ca13ad22963b33148516b317bc5e3c6751016d86f58f1eb89b3f38e5b988325d4e43382b1fab29f6b6c5a73d4600cf347d95ed9dd5e9be06e135df3dcaca5966971a9d21ce02efc66f9c781c80e10f9ca0033ff8ac0f7bd6c293a8688a09ff3cd528fd1a840f9075e259063218e3c649ef97480a8f6c23bf029276f1c477f9e335eb07a8111696a0931589dae384cca818e645b63c63d01239512ce06995db52150dc8fa21324270a4b1d9f6e1adffa0810e5e09eaa2240daa88e7585ff362be14b227df06cdffd75a43356723c88057f3592167404730f9c8c84c68241fc73f61c0f5420e058a1659ca6bcb3ddac14dd128dc83cd55102761ad785fc16e6975c874bb7d79c0ac0a0b1d5d28a9b1e56473aa1e9afb38d0b0cfbe6bad1153d56496dd00442975f03dfef79e6b4e2a812de038b297109904d7fbe3176d83d0a94be81088457b7933d217ac9c483317773b643c9c071d02d0a1ae9f32b278c4274e4b61196c9c3c193967e0ae9978465016b8c9e2c958c26b0aa6341a9701e773a8d1f291085f0d0eb0205592db9209b57e38794ba699d87ea6501decb62831aee61a32cdfef34c6e4250a96254518e2cc22c6b407f2bd6549980194f760c2d36958cf9ef047e37c6c57f43c752794939dc06be2bf27f33dad0c372e9ff48778759f2b33e4cab9bd6f767afebf83a383f5b22903a5029fc551d0bfbed80ed0dedf76738adb8a53e4476feb2f3dad78e5568abf51223d4f75eda685186d7290ec43c048836d5d9e8f5cbcf865d38a1b7a8137eedaff1fe7b7cea805aa9b7199eeec581b807f0116ca14844b8016e5a272a1b0d0a41d218a64580be48ed25061439414f116f3242402765b851b6ef00a53b885fa8f81eebbaf4a47890d65811aaa3ae69f0f5027472b921c05d7160a7d11be13ebf8066f21d13eff5ff935d95fb705c88c59b09b979aeee42c83a7d9727de4ee95a2b69fe7f1330d60901ec6e40cb01fb1975c48ebc4c46e2964b6869c277263cc5047e7091e6c957e6358bda633c6fc70e564d1905d47de65d5ddd74151f904048697aa08bbe00588490559e059a4458eb8a6b826c7d09dee5e2df2eecae6f05b532886ac94bef0fd61b53ce3a4c6a1ad3d418e1d4ceb92dadc8baafb966b78525ff872d0ae2be840bfe715878f709d4643fae078891d6b4ec15e791daecbffe5e4bd555218402e5bd07d2dcc3acf28fb887bb92c4b0409e1b7186d6eb88aceb5dac5a6b12f0f714140ec842d609d2655ffd1184ebf8e3ac16fc1482a2c893d72c88059b894ab504e7baf541511d03f1b704fbe035ef2b9c8247d6651d36e48924dcb81c8a1b4d8d757aa341ce7629b002b6c7a607a88b1174927a32be6783dbdde2ce96e9b6f27b0d3d5d5fdd6b4918cddd537b7f42172eeac1d7959fd164e902b4e01587bc249bd303760f130b39c30e376cb71ece0ea9bae8e1d3bad7b6af996aa631d6f60d131e5beefc65722b58f4c9a0c0218ebb22d73884ad0816431846d6434ccca5922c079d01222713697ac362ab12f3f24a6e700428b987c419aa1ec459aa6c95adc2926d02e57fd243e89c16e10399a882c5e997ef61222c48e7a1dc5cb2f1af18a224f29a95ab178d252223764360dec07d715cb08feaf988b00551eb9d01c6894e55ce15b361784a4bef1c99624cc19f6d1656152c6b6c1a1e43991da225b6ad7479b74dea9e5e85f5f8571ef843ffc3af34648b587d46c5d2a811a2829abc212be7dcb424d66cc174c0e05741500b874ffc6dd52e7bbeaa08a934cf608f6f3816b23867d315ec6a3a840c6e69b475fefcc640aa9ded61f483fe7835dbda4f9407bba747329ebcc2d0256de9528e2de8a36e86b5b1738baef05d633a32a6eae691685312f7d967dd517e93ef59213a9bef89e5112641b753a1e43e1326c1045adefec5923e43dc2cf5247a46b617666483b5719bef83dee8091b2471ba4f78a868d13d6629ad8c471ccbbace2171aaccb66adf92540c62acb324b95071361f62cc6be2a52976f4ddecefb369742ed87b65543d5fe0a01166a897b471caf64fb75c74e922d8c95dfbd295ff2bd2527654b8e6009e39733b49d3a252c221f93b03e7adfca761524fac25cfb9969e8b8e5838180c5f56fd6a43fe0cc67be09c05107efaf1bf264b7fa0610da515055fbafbca5e98ad7509fa758f073c28f88501f37477798269140711f74ac61e4d845561189a35da059a1288a0b2f3f4d3197098e5d0bbe6932cbca47ccdb0deb984be09d1634ff8a2d94e50d0066ea9771545c66ef30fe434217b8a61e940e531f4cfae05b7e0a94d060a8bc65fcabc2dbc248982efa46df161af37dcc2cbe4a3490aab7fa165ea6e3ff0a49df30f079ad713d6c4537c01b96765dd6025cfcc4473708dd2c094ac3cfd809eeca1395dd609ccab1dd25712cfc2f40a02cf78c80b63791590e4544a550512459daee2b22d717b1889bb80963950f0607c0718962300b9b875345e7c925adb0fb177bb46a85504ccae062dcfc0cf37b6230a9628b8a23b6226c5101e1a92558de3fa2b474acbfd3f6581ac833bd38ff06de626346ce858a137e8f2c1ffbfd9d9ba08fd48a8f9a57158f55e5ab0626b9759811a4554de90b09553a5ea5241c6c55db19d216e18ccc4cc09cb230e8f3378e4dc74c86ded04329caf9dadc196160f88da1f2cbf8198d769bcff233809d8daa124492d3a4b94c7f819a555e18d10af85300d0e9b8e2fac13d2b45db3d60d422321d26838c5730360b964924370cb07c19e48f69d48ce4f8ca852c2e0092a85b356f7ef754c7e50508f6e46a69eaafd1537413307841bd1f6de4a8df7d14c3f01587d1423d84e2183594dd492abfdb395255799dc4273861467d987f38728c7ef64e12f7580d06a20eb561e6fd235e04dd78c511f085987d71ff7f8d7788e2823e325fd99c110b615661fd5f6771d6392b0b8583d97fc304f248054244f6bff9963af8bc43751ed996544a5482aa65994100cfad159ff0fbb8702dc25d1e227c2f2d692712904872354b7302d08f4c28010f56d5d6fe088aa063206b1d8a80d5a4ee85ca114f2a1719f96f4cd5a82799da5291c36aae48a98b3f03882ae319d6d461ec6835997f10f63db5736f236dd4881db497d7e9bd1f660ad98c3cf0b2ce112837aeb6cf6d4076d41afc8ea94e0e57e03159b99c6013004fd6fb845c677cfe12be47c123f8b735cb8b8bde885ea22106007fb47af1284ff6b074bf8795dd954f1ac1d5cd05646a90416858416057928c2b739422bfe4c87fe15e153ec38bfc69f97c4982dfa6c3b5a4cfde9ce1bd71695437f04e99a61a60c5926f6e7997abb56db68e7407164ada112bf0f4f1d7744ba57e0c8f40fe3c72515748fe0d9643a48b5ad0cbc15d4db952d6e8b6fd621ee3a115e7e587a08cfd7f313bcf952a8b6556255a6011861acc821b68ba252164787915656864b96cffa475728f1ec0ab7ea8dfad76b79de4e9e527a49638f4f0a777cdf502e640aca86e9d66a7b1bb9bd5a392681b12881840e7f2ee9de93f7003f330c84345080f69089a991c536152e9b4d613061be2ad56adefcc8f55bb7ccefb772abbe436e27ba7c8ecb2aa90bf47898dd6e4b0fcbe991ae8807004afc125b8ee4ebac5cfea96bf42fa009c96c611837f3b7928c7dbace94b48c51017ff0f9a71bd06a14d8b6b9422e4a28cf74542ac91bbd366cf3bf8a9ef524aa8cbed255232ddc6d64e94e35a4a9e7c72e7268742fd8b13324eb39e594f7aa703eb0e08b67ce06949325dcc47ca5fcb383c947ebd3e27f246de02895c", 0x1000) [ 1251.228219] loop0: detected capacity change from 0 to 40 [ 1251.239595] loop6: detected capacity change from 0 to 40 [ 1251.254895] loop7: detected capacity change from 0 to 40 22:25:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1251.284846] loop2: detected capacity change from 0 to 40 22:25:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1251.386618] loop5: detected capacity change from 0 to 40 22:25:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1) 22:25:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 1) dup(0xffffffffffffffff) 22:25:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 1262.416761] loop5: detected capacity change from 0 to 40 [ 1262.421568] loop1: detected capacity change from 0 to 40 22:25:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:25:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0), 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1262.425532] loop2: detected capacity change from 0 to 40 [ 1262.435332] loop4: detected capacity change from 0 to 40 [ 1262.439188] loop7: detected capacity change from 0 to 40 [ 1262.449822] FAULT_INJECTION: forcing a failure. [ 1262.449822] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1262.450918] CPU: 0 PID: 8264 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1262.451506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1262.452095] Call Trace: [ 1262.452290] [ 1262.452468] dump_stack_lvl+0xc1/0xf0 [ 1262.452756] should_fail_ex+0x4b4/0x5b0 [ 1262.453041] __should_fail_alloc_page+0xe0/0x110 [ 1262.453394] prepare_alloc_pages+0x178/0x500 [ 1262.453717] __alloc_pages+0x149/0x480 [ 1262.454003] ? lock_acquire+0x19a/0x4c0 [ 1262.454287] ? __pfx___alloc_pages+0x10/0x10 [ 1262.454611] ? lock_release+0x1e3/0x680 [ 1262.454886] ? xas_start+0x14e/0x710 [ 1262.455168] alloc_pages+0x1a0/0x260 [ 1262.455434] filemap_alloc_folio+0x374/0x410 [ 1262.455752] ? lock_acquire+0x19a/0x4c0 [ 1262.456027] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1262.456376] ? lock_release+0x1e3/0x680 [ 1262.456645] ? __pfx_lock_release+0x10/0x10 [ 1262.456959] __filemap_get_folio+0x285/0x8d0 [ 1262.457274] pagecache_get_page+0x2e/0x120 [ 1262.457580] ? __pfx_fat_get_block+0x10/0x10 [ 1262.457887] block_write_begin+0x35/0x450 [ 1262.458191] cont_write_begin+0x4fe/0x700 [ 1262.458479] ? wb_wakeup_delayed+0x66/0xf0 [ 1262.458791] ? __pfx_fat_get_block+0x10/0x10 [ 1262.459101] ? __pfx_cont_write_begin+0x10/0x10 [ 1262.459434] ? lock_release+0x1e3/0x680 [ 1262.459705] ? __pfx_fault_in_readable+0x10/0x10 [ 1262.460055] fat_write_begin+0x89/0x180 [ 1262.460337] ? __pfx_fat_get_block+0x10/0x10 [ 1262.460670] generic_perform_write+0x25a/0x580 [ 1262.461020] ? __pfx_generic_perform_write+0x10/0x10 [ 1262.461401] ? __pfx_fat_update_time+0x10/0x10 [ 1262.461737] ? __pfx_file_update_time+0x10/0x10 [ 1262.462073] ? generic_write_checks+0x2c0/0x400 [ 1262.462423] __generic_file_write_iter+0x308/0x4b0 [ 1262.462712] loop6: detected capacity change from 0 to 40 [ 1262.462774] ? lock_is_held_type+0x9f/0x120 [ 1262.462811] generic_file_write_iter+0xe7/0x350 [ 1262.462838] vfs_write+0x941/0xd40 [ 1262.464380] ? __pfx_vfs_write+0x10/0x10 [ 1262.464669] ? __fget_files+0x270/0x480 [ 1262.464970] ksys_write+0x12b/0x260 [ 1262.465243] ? __pfx_ksys_write+0x10/0x10 [ 1262.465542] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1262.465909] do_syscall_64+0x3f/0x90 [ 1262.466183] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1262.466557] RIP: 0033:0x7fb7c28ecb19 [ 1262.466814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1262.468037] RSP: 002b:00007fb7bfe62188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1262.468163] loop3: detected capacity change from 0 to 40 [ 1262.468552] RAX: ffffffffffffffda RBX: 00007fb7c29fff60 RCX: 00007fb7c28ecb19 [ 1262.468565] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 1262.468575] RBP: 00007fb7bfe621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1262.470758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.471268] R13: 00007ffd6b0db4af R14: 00007fb7bfe62300 R15: 0000000000022000 [ 1262.471776] [ 1262.498131] syz-executor.5: attempt to access beyond end of device [ 1262.498131] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1262.498983] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1262.504348] FAULT_INJECTION: forcing a failure. [ 1262.504348] name failslab, interval 1, probability 0, space 0, times 1 [ 1262.505166] CPU: 0 PID: 8262 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1262.505727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1262.506317] Call Trace: [ 1262.506518] [ 1262.506703] dump_stack_lvl+0xc1/0xf0 [ 1262.507012] should_fail_ex+0x4b4/0x5b0 [ 1262.507347] should_failslab+0x9/0x20 [ 1262.507660] __kmem_cache_alloc_node+0x5b/0x310 [ 1262.508041] ? iter_file_splice_write+0x169/0xcb0 [ 1262.508440] ? iter_file_splice_write+0x169/0xcb0 [ 1262.508827] __kmalloc+0x4a/0x160 [ 1262.509130] iter_file_splice_write+0x169/0xcb0 [ 1262.509510] ? register_lock_class+0xbd/0x1890 [ 1262.509886] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1262.510310] ? __pfx_generic_file_splice_read+0x10/0x10 [ 1262.510734] ? inode_security+0x105/0x140 [ 1262.511090] ? security_file_permission+0xb5/0xe0 [ 1262.511474] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1262.511876] direct_splice_actor+0x113/0x180 [ 1262.512202] splice_direct_to_actor+0x33a/0x8c0 [ 1262.512557] ? __pfx_direct_splice_actor+0x10/0x10 [ 1262.512915] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1262.513308] ? security_file_permission+0xb5/0xe0 [ 1262.513646] do_splice_direct+0x1bc/0x290 [ 1262.513957] ? __pfx_do_splice_direct+0x10/0x10 [ 1262.514299] ? lock_is_held_type+0x9f/0x120 [ 1262.514610] do_sendfile+0xb1d/0x12b0 [ 1262.514894] ? __pfx_do_sendfile+0x10/0x10 [ 1262.515218] __x64_sys_sendfile64+0x1d5/0x210 [ 1262.515545] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1262.515920] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1262.516296] do_syscall_64+0x3f/0x90 [ 1262.516580] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1262.516945] RIP: 0033:0x7f6010d99b19 [ 1262.517218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1262.518443] RSP: 002b:00007f600e30f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1262.518991] RAX: ffffffffffffffda RBX: 00007f6010eacf60 RCX: 00007f6010d99b19 [ 1262.519485] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1262.519978] RBP: 00007f600e30f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1262.520485] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1262.520984] R13: 00007fff1e6d603f R14: 00007f600e30f300 R15: 0000000000022000 [ 1262.521506] 22:25:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 2) dup(0xffffffffffffffff) 22:25:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2) [ 1262.728499] loop5: detected capacity change from 0 to 40 [ 1262.741953] loop1: detected capacity change from 0 to 40 [ 1262.765444] syz-executor.5: attempt to access beyond end of device [ 1262.765444] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1262.766299] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:25:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 1) 22:25:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:25:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3) 22:25:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0), 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:25:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 3) dup(0xffffffffffffffff) [ 1274.410540] loop2: detected capacity change from 0 to 40 [ 1274.435323] loop6: detected capacity change from 0 to 40 [ 1274.435395] loop1: detected capacity change from 0 to 40 [ 1274.441226] loop3: detected capacity change from 0 to 40 [ 1274.442084] loop5: detected capacity change from 0 to 40 [ 1274.443569] loop4: detected capacity change from 0 to 40 [ 1274.450262] FAULT_INJECTION: forcing a failure. [ 1274.450262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1274.451337] CPU: 0 PID: 8306 Comm: syz-executor.6 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1274.452014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.452702] Call Trace: [ 1274.452926] [ 1274.453132] dump_stack_lvl+0xc1/0xf0 [ 1274.453476] should_fail_ex+0x4b4/0x5b0 [ 1274.453721] loop7: detected capacity change from 0 to 40 [ 1274.453833] __should_fail_alloc_page+0xe0/0x110 [ 1274.453869] prepare_alloc_pages+0x178/0x500 [ 1274.453906] __alloc_pages+0x149/0x480 [ 1274.453937] ? lock_acquire+0x19a/0x4c0 [ 1274.453960] ? __pfx___alloc_pages+0x10/0x10 [ 1274.453995] ? lock_release+0x1e3/0x680 [ 1274.454021] ? xas_start+0x14e/0x710 [ 1274.454053] alloc_pages+0x1a0/0x260 [ 1274.454082] filemap_alloc_folio+0x374/0x410 [ 1274.454105] ? lock_acquire+0x19a/0x4c0 [ 1274.454130] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1274.454153] ? lock_release+0x1e3/0x680 [ 1274.454175] ? __pfx_lock_release+0x10/0x10 [ 1274.454202] __filemap_get_folio+0x285/0x8d0 [ 1274.459658] pagecache_get_page+0x2e/0x120 [ 1274.460022] ? __pfx_fat_get_block+0x10/0x10 [ 1274.460406] block_write_begin+0x35/0x450 [ 1274.460782] cont_write_begin+0x4fe/0x700 [ 1274.461148] ? wb_wakeup_delayed+0x66/0xf0 [ 1274.461541] ? __pfx_fat_get_block+0x10/0x10 [ 1274.461937] ? __pfx_cont_write_begin+0x10/0x10 [ 1274.462343] ? lock_release+0x1e3/0x680 [ 1274.462697] ? __pfx_fault_in_readable+0x10/0x10 [ 1274.463117] fat_write_begin+0x89/0x180 [ 1274.463467] ? __pfx_fat_get_block+0x10/0x10 [ 1274.463862] generic_perform_write+0x25a/0x580 [ 1274.464267] ? __pfx_generic_perform_write+0x10/0x10 [ 1274.464696] ? __pfx_fat_update_time+0x10/0x10 [ 1274.465099] ? __pfx_file_update_time+0x10/0x10 [ 1274.465517] ? generic_write_checks+0x2c0/0x400 [ 1274.465934] __generic_file_write_iter+0x308/0x4b0 [ 1274.466365] ? lock_is_held_type+0x9f/0x120 [ 1274.466732] generic_file_write_iter+0xe7/0x350 [ 1274.467138] vfs_write+0x941/0xd40 [ 1274.467458] ? __pfx_vfs_write+0x10/0x10 [ 1274.467822] ? __fget_files+0x270/0x480 [ 1274.468191] ksys_write+0x12b/0x260 [ 1274.468512] ? __pfx_ksys_write+0x10/0x10 [ 1274.468877] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1274.469331] do_syscall_64+0x3f/0x90 [ 1274.469654] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1274.470098] RIP: 0033:0x7faf6b955b19 [ 1274.470413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.471899] RSP: 002b:00007faf68ecb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1274.472530] RAX: ffffffffffffffda RBX: 00007faf6ba68f60 RCX: 00007faf6b955b19 [ 1274.473121] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 1274.473723] RBP: 00007faf68ecb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.474310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.474890] R13: 00007fffef66ab2f R14: 00007faf68ecb300 R15: 0000000000022000 [ 1274.475496] [ 1274.507648] FAT-fs (loop0): bogus number of reserved sectors [ 1274.509240] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1274.522368] syz-executor.5: attempt to access beyond end of device [ 1274.522368] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1274.523971] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:25:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1274.560611] FAULT_INJECTION: forcing a failure. [ 1274.560611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1274.562989] CPU: 0 PID: 8310 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1274.563632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.564280] Call Trace: [ 1274.564497] [ 1274.564685] dump_stack_lvl+0xc1/0xf0 [ 1274.565001] should_fail_ex+0x4b4/0x5b0 [ 1274.565361] __should_fail_alloc_page+0xe0/0x110 [ 1274.565759] prepare_alloc_pages+0x178/0x500 [ 1274.566129] __alloc_pages+0x149/0x480 [ 1274.566462] ? lock_acquire+0x19a/0x4c0 [ 1274.566790] ? __pfx___alloc_pages+0x10/0x10 [ 1274.567172] ? lock_release+0x1e3/0x680 [ 1274.567515] ? xas_start+0x14e/0x710 [ 1274.567836] alloc_pages+0x1a0/0x260 [ 1274.568158] filemap_alloc_folio+0x374/0x410 [ 1274.568534] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1274.568935] ? mark_lock.part.0+0xef/0x2f30 [ 1274.569292] ? __mark_inode_dirty+0x625/0xc10 [ 1274.569677] ? reacquire_held_locks+0x22b/0x4e0 [ 1274.570056] ? __mark_inode_dirty+0x625/0xc10 [ 1274.570444] __filemap_get_folio+0x285/0x8d0 [ 1274.570823] ? find_held_lock+0x2c/0x110 [ 1274.571167] ext4_da_write_begin+0x2c9/0x840 [ 1274.571544] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1274.571961] generic_perform_write+0x25a/0x580 [ 1274.572360] ? __pfx_generic_perform_write+0x10/0x10 [ 1274.572795] ? __sanitizer_cov_trace_pc+0x50/0x70 [ 1274.573210] ext4_buffered_write_iter+0x164/0x460 [ 1274.573636] ext4_file_write_iter+0x3ff/0x1950 [ 1274.574006] ? lock_acquire+0x19a/0x4c0 [ 1274.574328] ? ksys_write+0x12b/0x260 [ 1274.574645] ? __pfx_lock_acquire+0x10/0x10 [ 1274.574992] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1274.575402] ? lock_is_held_type+0x9f/0x120 [ 1274.575754] ? lock_is_held_type+0x9f/0x120 [ 1274.576103] vfs_write+0x941/0xd40 [ 1274.576402] ? __pfx_vfs_write+0x10/0x10 [ 1274.576744] ? __fget_files+0x270/0x480 [ 1274.577088] ksys_write+0x12b/0x260 [ 1274.577401] ? __pfx_ksys_write+0x10/0x10 [ 1274.577747] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1274.578163] do_syscall_64+0x3f/0x90 [ 1274.578468] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1274.578882] RIP: 0033:0x7fb7c28ecb19 [ 1274.579173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.580529] RSP: 002b:00007fb7bfe41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1274.581114] RAX: ffffffffffffffda RBX: 00007fb7c2a00020 RCX: 00007fb7c28ecb19 [ 1274.581678] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000005 [ 1274.582228] RBP: 00007fb7bfe411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.582779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.583324] R13: 00007ffd6b0db4af R14: 00007fb7bfe41300 R15: 0000000000022000 [ 1274.583890] 22:25:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4) 22:25:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 2) [ 1274.640209] loop4: detected capacity change from 0 to 40 [ 1274.667723] loop3: detected capacity change from 0 to 40 [ 1274.682516] loop6: detected capacity change from 0 to 40 22:25:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1274.756487] loop5: detected capacity change from 0 to 40 22:25:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 4) dup(0xffffffffffffffff) [ 1274.781271] loop7: detected capacity change from 0 to 40 22:25:26 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 3) [ 1274.816368] loop2: detected capacity change from 0 to 40 [ 1274.824489] FAT-fs (loop0): bogus number of reserved sectors [ 1274.826216] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1274.842864] syz-executor.5: attempt to access beyond end of device [ 1274.842864] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1274.844491] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:25:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1274.898560] loop1: detected capacity change from 0 to 40 [ 1274.910235] loop4: detected capacity change from 0 to 40 [ 1274.921839] loop6: detected capacity change from 0 to 40 [ 1275.030669] loop3: detected capacity change from 0 to 40 22:25:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5) 22:25:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 5) dup(0xffffffffffffffff) 22:25:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 4) 22:25:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0), 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1286.784502] loop6: detected capacity change from 0 to 40 [ 1286.790435] loop3: detected capacity change from 0 to 40 [ 1286.799482] loop7: detected capacity change from 0 to 40 [ 1286.804917] loop1: detected capacity change from 0 to 40 [ 1286.807371] loop4: detected capacity change from 0 to 40 [ 1286.830782] loop5: detected capacity change from 0 to 40 22:25:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 5) [ 1286.859559] loop2: detected capacity change from 0 to 40 22:25:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 6) dup(0xffffffffffffffff) 22:25:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1286.905947] loop6: detected capacity change from 0 to 40 22:25:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1286.926545] FAT-fs (loop0): bogus number of reserved sectors [ 1286.927616] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1286.941152] loop1: detected capacity change from 0 to 40 [ 1286.956652] syz-executor.5: attempt to access beyond end of device [ 1286.956652] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1286.957493] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:25:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6) [ 1287.028387] loop3: detected capacity change from 0 to 40 [ 1287.033533] loop4: detected capacity change from 0 to 40 [ 1287.071024] loop5: detected capacity change from 0 to 40 [ 1287.089653] syz-executor.5: attempt to access beyond end of device [ 1287.089653] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1287.090490] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:25:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:25:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1299.127255] loop1: detected capacity change from 0 to 40 22:25:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 7) dup(0xffffffffffffffff) 22:25:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7) 22:25:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 6) [ 1299.147883] loop5: detected capacity change from 0 to 40 [ 1299.156596] loop7: detected capacity change from 0 to 40 [ 1299.167506] loop3: detected capacity change from 0 to 40 [ 1299.180452] loop4: detected capacity change from 0 to 40 [ 1299.187111] syz-executor.5: attempt to access beyond end of device [ 1299.187111] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1299.187966] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:25:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 8) dup(0xffffffffffffffff) [ 1299.204042] loop6: detected capacity change from 0 to 40 [ 1299.215359] FAT-fs (loop0): bogus number of reserved sectors [ 1299.216720] FAT-fs (loop0): Can't find a valid FAT filesystem 22:25:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8) 22:25:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1299.268386] FAT-fs (loop2): bogus number of reserved sectors [ 1299.270135] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1299.272588] loop1: detected capacity change from 0 to 40 22:25:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 7) [ 1299.370939] loop5: detected capacity change from 0 to 40 22:25:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1299.417995] loop6: detected capacity change from 0 to 40 [ 1299.420780] loop7: detected capacity change from 0 to 40 22:25:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 9) dup(0xffffffffffffffff) 22:25:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:25:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 1) [ 1299.485072] syz-executor.5: attempt to access beyond end of device [ 1299.485072] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1299.486924] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1299.523098] FAULT_INJECTION: forcing a failure. [ 1299.523098] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.524953] CPU: 0 PID: 8416 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1299.525972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1299.526970] Call Trace: [ 1299.527298] [ 1299.527597] dump_stack_lvl+0xc1/0xf0 [ 1299.528097] should_fail_ex+0x4b4/0x5b0 [ 1299.528636] ? __es_insert_extent+0x3a9/0x12f0 [ 1299.529225] should_failslab+0x9/0x20 [ 1299.529726] kmem_cache_alloc+0x5a/0x390 [ 1299.530257] __es_insert_extent+0x3a9/0x12f0 [ 1299.530852] ext4_es_insert_delayed_block+0x298/0x470 [ 1299.531518] ? __pfx_ext4_es_insert_delayed_block+0x10/0x10 [ 1299.532226] ? percpu_counter_add_batch+0xc8/0x180 [ 1299.532856] ? do_raw_spin_unlock+0x53/0x220 [ 1299.533426] ? _raw_spin_unlock+0x1e/0x40 [ 1299.533985] ? ext4_da_reserve_space+0xf8/0x3d0 [ 1299.534597] ext4_da_get_block_prep+0xc1e/0x1180 [ 1299.535227] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1299.535905] ? __block_write_begin_int+0x121b/0x1530 [ 1299.536583] ? __pfx_lock_release+0x10/0x10 [ 1299.537167] __block_write_begin_int+0x3f5/0x1530 [ 1299.537832] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1299.538522] ? __pfx___block_write_begin_int+0x10/0x10 [ 1299.539211] ? __filemap_get_folio+0x1d3/0x8d0 [ 1299.539839] ext4_da_write_begin+0x30b/0x840 [ 1299.540444] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1299.541109] generic_perform_write+0x25a/0x580 [ 1299.541701] ? __pfx_generic_perform_write+0x10/0x10 [ 1299.542349] ? __pfx_file_modified_flags+0x10/0x10 [ 1299.542988] ext4_buffered_write_iter+0x164/0x460 [ 1299.543621] ext4_file_write_iter+0x3ff/0x1950 [ 1299.544214] ? lock_acquire+0x19a/0x4c0 [ 1299.544729] ? ksys_write+0x12b/0x260 [ 1299.545246] ? __pfx_lock_acquire+0x10/0x10 [ 1299.545812] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1299.546451] ? lock_is_held_type+0x9f/0x120 [ 1299.547068] ? lock_is_held_type+0x9f/0x120 [ 1299.547717] vfs_write+0x941/0xd40 [ 1299.548192] ? __pfx_vfs_write+0x10/0x10 [ 1299.548722] ? __fget_files+0x270/0x480 [ 1299.549274] ksys_write+0x12b/0x260 [ 1299.549780] ? __pfx_ksys_write+0x10/0x10 [ 1299.550322] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1299.550986] do_syscall_64+0x3f/0x90 [ 1299.551478] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1299.552134] RIP: 0033:0x7fb7c28ecb19 [ 1299.552610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1299.554803] RSP: 002b:00007fb7bfe62188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1299.555573] loop2: detected capacity change from 0 to 40 [ 1299.555717] RAX: ffffffffffffffda RBX: 00007fb7c29fff60 RCX: 00007fb7c28ecb19 [ 1299.557352] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 1299.558233] RBP: 00007fb7bfe621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1299.559108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.559976] R13: 00007ffd6b0db4af R14: 00007fb7bfe62300 R15: 0000000000022000 [ 1299.560869] [ 1299.565367] FAT-fs (loop0): bogus number of reserved sectors [ 1299.567225] FAT-fs (loop0): Can't find a valid FAT filesystem 22:25:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9) 22:25:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 8) [ 1299.581327] loop4: detected capacity change from 0 to 40 [ 1299.584466] loop3: detected capacity change from 0 to 40 [ 1299.585469] FAULT_INJECTION: forcing a failure. [ 1299.585469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1299.585536] CPU: 1 PID: 8419 Comm: syz-executor.2 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1299.585570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1299.585589] Call Trace: [ 1299.585607] [ 1299.585618] dump_stack_lvl+0xc1/0xf0 [ 1299.590191] should_fail_ex+0x4b4/0x5b0 [ 1299.590752] __should_fail_alloc_page+0xe0/0x110 [ 1299.591410] prepare_alloc_pages+0x178/0x500 [ 1299.592033] __alloc_pages+0x149/0x480 [ 1299.592578] ? lock_acquire+0x19a/0x4c0 [ 1299.593120] ? __pfx___alloc_pages+0x10/0x10 [ 1299.593742] ? lock_release+0x1e3/0x680 [ 1299.594297] ? xas_start+0x14e/0x710 [ 1299.594823] alloc_pages+0x1a0/0x260 [ 1299.595339] filemap_alloc_folio+0x374/0x410 [ 1299.595946] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 1299.596615] ? lock_release+0x1e3/0x680 [ 1299.597155] ? __pfx_lock_release+0x10/0x10 [ 1299.597744] __filemap_get_folio+0x285/0x8d0 [ 1299.598366] pagecache_get_page+0x2e/0x120 [ 1299.598933] ? __pfx_fat_get_block+0x10/0x10 [ 1299.599540] block_write_begin+0x35/0x450 [ 1299.600121] cont_write_begin+0x4fe/0x700 [ 1299.600693] ? wb_wakeup_delayed+0x66/0xf0 [ 1299.601278] ? __pfx_fat_get_block+0x10/0x10 [ 1299.601904] ? __pfx_cont_write_begin+0x10/0x10 [ 1299.602537] ? lock_release+0x1e3/0x680 [ 1299.603084] ? __pfx_fault_in_readable+0x10/0x10 [ 1299.603734] fat_write_begin+0x89/0x180 [ 1299.604281] ? __pfx_fat_get_block+0x10/0x10 [ 1299.604893] generic_perform_write+0x25a/0x580 [ 1299.605520] ? __pfx_generic_perform_write+0x10/0x10 [ 1299.606203] ? __pfx_fat_update_time+0x10/0x10 [ 1299.606824] ? __pfx_file_update_time+0x10/0x10 [ 1299.607482] ? generic_write_checks+0x2c0/0x400 [ 1299.608136] __generic_file_write_iter+0x308/0x4b0 [ 1299.608819] ? lock_is_held_type+0x9f/0x120 [ 1299.609434] generic_file_write_iter+0xe7/0x350 [ 1299.610100] vfs_write+0x941/0xd40 [ 1299.610623] ? __pfx_vfs_write+0x10/0x10 [ 1299.611206] ? __fget_files+0x270/0x480 [ 1299.611785] ksys_write+0x12b/0x260 [ 1299.612311] ? __pfx_ksys_write+0x10/0x10 [ 1299.612914] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1299.613653] do_syscall_64+0x3f/0x90 [ 1299.614183] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1299.614901] RIP: 0033:0x7f03671deb19 [ 1299.615414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1299.617823] RSP: 002b:00007f0364754188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1299.618844] RAX: ffffffffffffffda RBX: 00007f03672f1f60 RCX: 00007f03671deb19 [ 1299.619805] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 1299.620779] RBP: 00007f03647541d0 R08: 0000000000000000 R09: 0000000000000000 [ 1299.621733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.622697] R13: 00007ffddf6c998f R14: 00007f0364754300 R15: 0000000000022000 [ 1299.623680] [ 1299.725221] loop6: detected capacity change from 0 to 40 [ 1299.756132] loop5: detected capacity change from 0 to 40 [ 1299.826448] syz-executor.5: attempt to access beyond end of device [ 1299.826448] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1299.828078] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1299.849194] FAULT_INJECTION: forcing a failure. [ 1299.849194] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1299.851152] CPU: 0 PID: 8429 Comm: syz-executor.5 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1299.852216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1299.853285] Call Trace: [ 1299.853650] [ 1299.853974] dump_stack_lvl+0xc1/0xf0 [ 1299.854515] should_fail_ex+0x4b4/0x5b0 [ 1299.855107] _copy_to_user+0x30/0xc0 [ 1299.855656] simple_read_from_buffer+0xd0/0x170 [ 1299.856302] proc_fail_nth_read+0x19c/0x230 [ 1299.856898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1299.857561] ? security_file_permission+0xb5/0xe0 [ 1299.858261] vfs_read+0x1e4/0x8b0 [ 1299.858751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1299.859407] ? __pfx_vfs_read+0x10/0x10 [ 1299.859954] ? __fget_files+0x270/0x480 [ 1299.860532] ksys_read+0x12b/0x260 [ 1299.861000] ? __pfx_ksys_read+0x10/0x10 [ 1299.861528] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1299.862214] do_syscall_64+0x3f/0x90 [ 1299.862708] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1299.863367] RIP: 0033:0x7f6010d4c69c [ 1299.863843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1299.866064] RSP: 002b:00007f600e30f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1299.867002] RAX: ffffffffffffffda RBX: 0000000000001ba0 RCX: 00007f6010d4c69c [ 1299.867879] RDX: 000000000000000f RSI: 00007f600e30f1e0 RDI: 0000000000000008 [ 1299.868759] RBP: 00007f600e30f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1299.869646] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1299.870522] R13: 00007fff1e6d603f R14: 00007f600e30f300 R15: 0000000000022000 [ 1299.871425] 22:26:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:26:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 9) 22:26:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 10) dup(0xffffffffffffffff) [ 1311.188162] loop5: detected capacity change from 0 to 40 22:26:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 2) 22:26:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1311.200883] loop1: detected capacity change from 0 to 40 [ 1311.207731] loop7: detected capacity change from 0 to 40 [ 1311.222478] loop4: detected capacity change from 0 to 40 [ 1311.230371] loop2: detected capacity change from 0 to 40 [ 1311.235420] FAT-fs (loop0): bogus number of reserved sectors [ 1311.236582] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1311.239911] loop6: detected capacity change from 0 to 40 [ 1311.247921] syz-executor.5: attempt to access beyond end of device [ 1311.247921] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1311.248735] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1311.258515] loop3: detected capacity change from 0 to 40 22:26:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 11) dup(0xffffffffffffffff) 22:26:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, 0x0, 0x0) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:26:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r4, r5) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1311.349415] loop1: detected capacity change from 0 to 40 [ 1311.369493] loop5: detected capacity change from 0 to 40 [ 1311.371011] loop7: detected capacity change from 0 to 40 [ 1311.399715] syz-executor.5: attempt to access beyond end of device [ 1311.399715] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1311.400592] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1312.209989] syz-executor.5: attempt to access beyond end of device [ 1312.209989] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1312.211969] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1324.853449] loop5: detected capacity change from 0 to 40 22:26:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 10) 22:26:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1112c2, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x501042, 0x14) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, 0x0, 0x0) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:26:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 12) dup(0xffffffffffffffff) 22:26:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 3) 22:26:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1324.875396] loop1: detected capacity change from 0 to 40 [ 1324.879223] loop7: detected capacity change from 0 to 40 [ 1324.883050] loop6: detected capacity change from 0 to 40 [ 1324.883502] loop2: detected capacity change from 0 to 40 [ 1324.899767] loop3: detected capacity change from 0 to 40 [ 1324.903169] loop0: detected capacity change from 0 to 40 [ 1324.907717] loop4: detected capacity change from 0 to 40 22:26:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 11) 22:26:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 13) dup(0xffffffffffffffff) [ 1324.951867] FAT-fs (loop0): bogus number of reserved sectors [ 1324.953239] FAT-fs (loop0): Can't find a valid FAT filesystem 22:26:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, 0x0, 0x0) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:26:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 4) [ 1324.996447] loop6: detected capacity change from 0 to 40 [ 1325.005315] loop1: detected capacity change from 0 to 40 [ 1325.033164] loop2: detected capacity change from 0 to 40 [ 1325.034635] loop7: detected capacity change from 0 to 40 22:26:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 12) 22:26:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 14) dup(0xffffffffffffffff) 22:26:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 5) [ 1325.156253] loop6: detected capacity change from 0 to 40 [ 1325.173243] loop4: detected capacity change from 0 to 40 [ 1325.177748] loop0: detected capacity change from 0 to 40 [ 1325.183188] loop3: detected capacity change from 0 to 40 [ 1325.202233] loop1: detected capacity change from 0 to 40 [ 1325.210786] FAT-fs (loop0): bogus number of reserved sectors [ 1325.212272] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1325.217048] loop2: detected capacity change from 0 to 40 22:26:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140), 0x0) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1325.337440] loop7: detected capacity change from 0 to 40 [ 1338.697066] loop1: detected capacity change from 0 to 40 22:26:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 13) 22:26:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140), 0x0) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:26:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 6) 22:26:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r5 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x80000001) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r7, &(0x7f0000000140)="a3", 0x1) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r7, 0x0, &(0x7f0000000000)='./file0\x00', 0x84, 0x4000, 0x12345}, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r8, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r8, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:26:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 15) dup(0xffffffffffffffff) 22:26:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, 0x0, 0x0) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1338.700766] loop6: detected capacity change from 0 to 40 [ 1338.708968] loop7: detected capacity change from 0 to 40 [ 1338.709499] loop2: detected capacity change from 0 to 40 [ 1338.721491] loop0: detected capacity change from 0 to 40 [ 1338.727844] loop4: detected capacity change from 0 to 40 [ 1338.746430] loop5: detected capacity change from 0 to 40 [ 1338.757663] loop3: detected capacity change from 0 to 40 22:26:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 14) [ 1338.769367] FAT-fs (loop0): bogus number of reserved sectors [ 1338.770729] FAT-fs (loop0): Can't find a valid FAT filesystem 22:26:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140), 0x0) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1338.818246] loop6: detected capacity change from 0 to 40 22:26:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, 0x0, 0x0) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 16) dup(0xffffffffffffffff) 22:26:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 7) [ 1338.913773] loop7: detected capacity change from 0 to 40 [ 1338.957500] loop1: detected capacity change from 0 to 40 22:26:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1338.973353] loop2: detected capacity change from 0 to 40 [ 1338.983642] loop4: detected capacity change from 0 to 40 [ 1338.985150] FAULT_INJECTION: forcing a failure. [ 1338.985150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.985194] CPU: 1 PID: 8545 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1338.985228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1338.985245] Call Trace: [ 1338.985256] [ 1338.985270] dump_stack_lvl+0xc1/0xf0 [ 1338.985323] should_fail_ex+0x4b4/0x5b0 [ 1338.990557] ? page_copy_sane+0xcc/0x2b0 [ 1338.991129] copy_page_from_iter_atomic+0x26d/0x14e0 [ 1338.991797] ? __pfx_fat_get_block+0x10/0x10 [ 1338.992397] ? __pfx_cont_write_begin+0x10/0x10 [ 1338.992999] ? lock_release+0x1e3/0x680 [ 1338.993520] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 1338.994228] ? __pfx_fault_in_readable+0x10/0x10 [ 1338.994857] ? fat_write_begin+0x95/0x180 [ 1338.995390] ? __pfx_fat_get_block+0x10/0x10 [ 1338.995965] generic_perform_write+0x2cf/0x580 [ 1338.996556] ? __pfx_generic_perform_write+0x10/0x10 [ 1338.997193] ? __pfx_fat_update_time+0x10/0x10 [ 1338.997793] ? __pfx_file_update_time+0x10/0x10 22:26:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 15) [ 1338.998398] ? generic_write_checks+0x2c0/0x400 [ 1338.999141] __generic_file_write_iter+0x308/0x4b0 [ 1338.999763] ? lock_is_held_type+0x9f/0x120 [ 1339.000326] generic_file_write_iter+0xe7/0x350 [ 1339.000933] vfs_write+0x941/0xd40 [ 1339.001404] ? __pfx_vfs_write+0x10/0x10 [ 1339.001940] ? __fget_files+0x270/0x480 [ 1339.002527] ksys_write+0x12b/0x260 [ 1339.002995] ? __pfx_ksys_write+0x10/0x10 [ 1339.003536] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1339.004238] do_syscall_64+0x3f/0x90 [ 1339.004733] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1339.005421] RIP: 0033:0x7fb7c28ecb19 [ 1339.005895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1339.008189] RSP: 002b:00007fb7bfe62188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1339.009107] RAX: ffffffffffffffda RBX: 00007fb7c29fff60 RCX: 00007fb7c28ecb19 [ 1339.010017] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 1339.010932] RBP: 00007fb7bfe621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1339.011838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1339.012747] R13: 00007ffd6b0db4af R14: 00007fb7bfe62300 R15: 0000000000022000 [ 1339.013687] [ 1339.066764] syz-executor.5: attempt to access beyond end of device [ 1339.066764] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1339.068381] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:26:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 17) dup(0xffffffffffffffff) [ 1339.097392] loop3: detected capacity change from 0 to 40 22:26:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 8) [ 1339.133614] loop0: detected capacity change from 0 to 40 [ 1339.159698] FAT-fs (loop0): bogus number of reserved sectors [ 1339.160465] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1339.218940] loop2: detected capacity change from 0 to 40 [ 1339.229043] loop1: detected capacity change from 0 to 40 22:26:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 18) dup(0xffffffffffffffff) 22:26:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 9) 22:26:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 16) 22:26:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, 0x0, 0x0) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}, {&(0x7f0000000300)="a250a793304e796b988697eb3052eb940347ecff7b295041141f49a84ed748c805cc05eb53a0edd5fed1e9dfe527a8c8b2e9d3ff732f3c3c6373705470bcf199076ef1bbaa6b81ee955269d6daad6e88e26ac4643f0b4d9f611bad1267015d0e30283605ee05105a61bd616943b0d830311cbdea4c223a3e26d9d918f59130c21f6d1557646e7276dd4f1a536fbbf098da6b", 0x92, 0x9}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r0, &(0x7f0000000140)="a3", 0x1) r1 = openat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x34202, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) setxattr$security_evm(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "a126500e0f60b03957b0bbbf7f5a7cf0"}, 0x11, 0x3) [ 1352.388004] loop1: detected capacity change from 0 to 40 [ 1352.390593] loop5: detected capacity change from 0 to 40 22:26:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1352.395551] loop6: detected capacity change from 0 to 40 [ 1352.403112] loop2: detected capacity change from 0 to 40 [ 1352.404729] loop3: detected capacity change from 0 to 40 [ 1352.407877] FAT-fs (loop5): invalid media value (0x30) [ 1352.408251] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1352.416385] loop4: detected capacity change from 0 to 40 [ 1352.423621] loop7: detected capacity change from 0 to 40 [ 1352.456392] loop0: detected capacity change from 0 to 40 22:26:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 19) dup(0xffffffffffffffff) [ 1352.471646] FAULT_INJECTION: forcing a failure. [ 1352.471646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.473328] CPU: 1 PID: 8580 Comm: syz-executor.6 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1352.474325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1352.475296] Call Trace: [ 1352.475620] [ 1352.475911] dump_stack_lvl+0xc1/0xf0 [ 1352.476402] should_fail_ex+0x4b4/0x5b0 [ 1352.476918] ? page_copy_sane+0xcc/0x2b0 [ 1352.477451] copy_page_from_iter_atomic+0x26d/0x14e0 [ 1352.478089] ? __pfx_fat_get_block+0x10/0x10 [ 1352.478722] ? __pfx_cont_write_begin+0x10/0x10 [ 1352.479332] ? lock_release+0x1e3/0x680 [ 1352.479862] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 1352.480564] ? __pfx_fault_in_readable+0x10/0x10 [ 1352.481187] ? fat_write_begin+0x95/0x180 [ 1352.481731] ? __pfx_fat_get_block+0x10/0x10 [ 1352.482325] generic_perform_write+0x2cf/0x580 [ 1352.482934] ? __pfx_generic_perform_write+0x10/0x10 [ 1352.483577] ? __pfx_fat_update_time+0x10/0x10 [ 1352.484183] ? __pfx_file_update_time+0x10/0x10 [ 1352.484786] ? generic_write_checks+0x2c0/0x400 [ 1352.485404] __generic_file_write_iter+0x308/0x4b0 [ 1352.486036] ? lock_is_held_type+0x9f/0x120 [ 1352.486606] generic_file_write_iter+0xe7/0x350 [ 1352.487346] vfs_write+0x941/0xd40 [ 1352.487811] ? __pfx_vfs_write+0x10/0x10 [ 1352.488328] ? __fget_files+0x270/0x480 [ 1352.488859] ksys_write+0x12b/0x260 [ 1352.489324] ? __pfx_ksys_write+0x10/0x10 [ 1352.489845] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1352.490508] do_syscall_64+0x3f/0x90 [ 1352.490976] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1352.491614] RIP: 0033:0x7faf6b955b19 [ 1352.492074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1352.494187] RSP: 002b:00007faf68ecb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1352.495102] RAX: ffffffffffffffda RBX: 00007faf6ba68f60 RCX: 00007faf6b955b19 [ 1352.495105] loop1: detected capacity change from 0 to 40 [ 1352.495123] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 1352.497086] RBP: 00007faf68ecb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.497931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1352.498809] R13: 00007fffef66ab2f R14: 00007faf68ecb300 R15: 0000000000022000 [ 1352.499700] [ 1352.505260] FAT-fs (loop0): bogus number of reserved sectors [ 1352.505659] FAT-fs (loop0): Can't find a valid FAT filesystem 22:26:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 10) [ 1352.603400] loop3: detected capacity change from 0 to 40 22:26:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 20) dup(0xffffffffffffffff) 22:26:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140), 0x0) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 17) [ 1352.699236] loop2: detected capacity change from 0 to 40 [ 1352.744572] loop1: detected capacity change from 0 to 40 [ 1352.754430] loop6: detected capacity change from 0 to 40 [ 1352.775421] loop0: detected capacity change from 0 to 40 [ 1352.799322] loop4: detected capacity change from 0 to 40 [ 1352.819509] FAT-fs (loop0): bogus number of reserved sectors [ 1352.820597] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1353.232763] loop5: detected capacity change from 0 to 40 [ 1353.234474] FAT-fs (loop5): Unrecognized mount option "/file0" or missing value 22:26:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:26:57 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) sendfile(r0, r3, &(0x7f0000000180)=0x8, 0x3f40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r4, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:26:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140), 0x0) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 18) [ 1365.866270] loop6: detected capacity change from 0 to 40 [ 1365.866588] loop2: detected capacity change from 0 to 40 [ 1365.869422] loop7: detected capacity change from 0 to 40 22:26:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 21) dup(0xffffffffffffffff) 22:26:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:26:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 11) [ 1365.873569] loop1: detected capacity change from 0 to 40 [ 1365.897691] loop0: detected capacity change from 0 to 40 [ 1365.898894] loop4: detected capacity change from 0 to 40 22:26:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 22) dup(0xffffffffffffffff) [ 1365.927379] loop3: detected capacity change from 0 to 40 [ 1365.932315] loop5: detected capacity change from 0 to 40 [ 1365.940211] FAT-fs (loop0): bogus number of reserved sectors [ 1365.941383] FAT-fs (loop0): Can't find a valid FAT filesystem 22:26:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:26:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 19) [ 1365.984379] loop1: detected capacity change from 0 to 40 22:26:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 12) 22:26:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1366.002129] syz-executor.5: attempt to access beyond end of device [ 1366.002129] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1366.003408] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:26:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140), 0x0) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1366.040258] loop7: detected capacity change from 0 to 40 [ 1366.048315] loop2: detected capacity change from 0 to 40 [ 1366.066454] loop6: detected capacity change from 0 to 40 [ 1366.083285] loop3: detected capacity change from 0 to 40 [ 1366.088739] loop4: detected capacity change from 0 to 40 [ 1379.156139] loop1: detected capacity change from 0 to 40 22:27:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 23) dup(0xffffffffffffffff) 22:27:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 13) 22:27:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 20) 22:27:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, 0x0, &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:27:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1379.164022] loop6: detected capacity change from 0 to 40 [ 1379.167411] loop4: detected capacity change from 0 to 40 [ 1379.168462] loop7: detected capacity change from 0 to 40 [ 1379.183710] loop0: detected capacity change from 0 to 40 [ 1379.191301] loop3: detected capacity change from 0 to 40 [ 1379.199631] loop2: detected capacity change from 0 to 40 [ 1379.206192] loop5: detected capacity change from 0 to 40 [ 1379.230339] FAT-fs (loop0): bogus number of reserved sectors [ 1379.231619] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1379.235146] FAULT_INJECTION: forcing a failure. [ 1379.235146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.236756] CPU: 0 PID: 8658 Comm: syz-executor.1 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1379.237813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1379.238902] Call Trace: [ 1379.239258] [ 1379.239581] dump_stack_lvl+0xc1/0xf0 [ 1379.240114] should_fail_ex+0x4b4/0x5b0 [ 1379.240687] _copy_to_user+0x30/0xc0 [ 1379.241224] simple_read_from_buffer+0xd0/0x170 [ 1379.241871] proc_fail_nth_read+0x19c/0x230 [ 1379.242448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1379.243124] ? security_file_permission+0xb5/0xe0 [ 1379.243768] vfs_read+0x1e4/0x8b0 [ 1379.244255] ? __pfx_proc_fail_nth_read+0x10/0x10 22:27:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1379.244889] ? __pfx_vfs_read+0x10/0x10 [ 1379.245511] ? __fget_files+0x270/0x480 [ 1379.246093] ksys_read+0x12b/0x260 [ 1379.246589] ? __pfx_ksys_read+0x10/0x10 [ 1379.247165] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1379.247881] do_syscall_64+0x3f/0x90 [ 1379.248404] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1379.249107] RIP: 0033:0x7fb7c289f69c [ 1379.249611] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1379.251959] RSP: 002b:00007fb7bfe62170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1379.252957] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb7c289f69c [ 1379.253883] RDX: 000000000000000f RSI: 00007fb7bfe621e0 RDI: 0000000000000004 [ 1379.254834] RBP: 00007fb7bfe621d0 R08: 0000000000000000 R09: 0000000000000000 [ 1379.255759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1379.256686] R13: 00007ffd6b0db4af R14: 00007fb7bfe62300 R15: 0000000000022000 [ 1379.257636] 22:27:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, 0x0, &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1379.284638] syz-executor.5: attempt to access beyond end of device [ 1379.284638] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1379.285552] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1379.290268] loop4: detected capacity change from 0 to 40 22:27:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 21) [ 1379.328103] loop7: detected capacity change from 0 to 40 22:27:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 14) 22:27:11 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) linkat(r3, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file2\x00', 0x1400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) r6 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r6) sendfile(r5, r4, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) [ 1379.390633] loop2: detected capacity change from 0 to 40 [ 1379.399424] loop6: detected capacity change from 0 to 40 22:27:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) [ 1379.428153] loop5: detected capacity change from 0 to 40 22:27:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1379.453380] loop3: detected capacity change from 0 to 40 22:27:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, 0x0, &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1379.471269] loop0: detected capacity change from 0 to 40 [ 1379.482958] loop1: detected capacity change from 0 to 40 [ 1379.483600] FAT-fs (loop0): bogus number of reserved sectors [ 1379.484121] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1379.516917] syz-executor.5: attempt to access beyond end of device [ 1379.516917] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1379.517695] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1379.530249] loop7: detected capacity change from 0 to 40 22:27:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 22) [ 1399.266387] loop2: detected capacity change from 0 to 40 22:27:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x2) dup(0xffffffffffffffff) [ 1399.282485] loop1: detected capacity change from 0 to 40 [ 1399.286713] loop6: detected capacity change from 0 to 40 22:27:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x482, 0x92b189dd53e60d0f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22100, 0x82) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r4, &(0x7f0000000140)="a3", 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 22:27:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, 0x0, &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 15) 22:27:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1399.319868] loop5: detected capacity change from 0 to 40 [ 1399.352776] loop0: detected capacity change from 0 to 40 [ 1399.354350] loop7: detected capacity change from 0 to 40 [ 1399.358514] loop3: detected capacity change from 0 to 40 [ 1399.363474] loop4: detected capacity change from 0 to 40 22:27:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 16) [ 1399.407149] syz-executor.5: attempt to access beyond end of device [ 1399.407149] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1399.408540] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1399.414087] FAT-fs (loop0): bogus number of reserved sectors [ 1399.415656] FAT-fs (loop0): Can't find a valid FAT filesystem 22:27:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x3) dup(0xffffffffffffffff) 22:27:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 23) [ 1399.503954] loop2: detected capacity change from 0 to 40 [ 1399.521387] loop1: detected capacity change from 0 to 40 [ 1399.526693] loop6: detected capacity change from 0 to 40 22:27:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffff, 0x5}}, './file0\x00'}) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x230080, 0x4) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1399.540861] FAULT_INJECTION: forcing a failure. [ 1399.540861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1399.542543] CPU: 0 PID: 8729 Comm: syz-executor.2 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1399.543481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1399.544391] Call Trace: [ 1399.544685] [ 1399.544959] dump_stack_lvl+0xc1/0xf0 [ 1399.545413] should_fail_ex+0x4b4/0x5b0 [ 1399.545884] ? page_copy_sane+0xcc/0x2b0 [ 1399.546371] copy_page_from_iter_atomic+0x26d/0x14e0 [ 1399.546970] ? __pfx_fat_get_block+0x10/0x10 [ 1399.547493] ? __pfx_cont_write_begin+0x10/0x10 [ 1399.548035] ? lock_release+0x1e3/0x680 [ 1399.548495] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 1399.549110] ? __pfx_fault_in_readable+0x10/0x10 [ 1399.549677] ? fat_write_begin+0x95/0x180 [ 1399.550169] ? __pfx_fat_get_block+0x10/0x10 [ 1399.550697] generic_perform_write+0x2cf/0x580 [ 1399.551262] ? __pfx_generic_perform_write+0x10/0x10 [ 1399.551837] ? __pfx_fat_update_time+0x10/0x10 [ 1399.552369] ? __pfx_file_update_time+0x10/0x10 [ 1399.552906] ? generic_write_checks+0x2c0/0x400 [ 1399.553452] __generic_file_write_iter+0x308/0x4b0 [ 1399.554025] ? lock_is_held_type+0x9f/0x120 [ 1399.554524] generic_file_write_iter+0xe7/0x350 [ 1399.555090] vfs_write+0x941/0xd40 [ 1399.555508] ? __pfx_vfs_write+0x10/0x10 [ 1399.555980] ? __fget_files+0x270/0x480 [ 1399.556466] ksys_write+0x12b/0x260 [ 1399.556897] ? __pfx_ksys_write+0x10/0x10 [ 1399.557382] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1399.557975] do_syscall_64+0x3f/0x90 [ 1399.558414] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1399.559005] RIP: 0033:0x7f03671deb19 [ 1399.559456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.561442] RSP: 002b:00007f0364754188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1399.562281] RAX: ffffffffffffffda RBX: 00007f03672f1f60 RCX: 00007f03671deb19 [ 1399.563062] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 1399.563831] RBP: 00007f03647541d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.564604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.565385] R13: 00007ffddf6c998f R14: 00007f0364754300 R15: 0000000000022000 [ 1399.566185] 22:27:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, 0x0, &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1399.627427] loop5: detected capacity change from 0 to 40 22:27:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x4) dup(0xffffffffffffffff) [ 1399.678753] syz-executor.5: attempt to access beyond end of device [ 1399.678753] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1399.680158] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1399.689488] loop0: detected capacity change from 0 to 40 [ 1399.720389] loop1: detected capacity change from 0 to 40 [ 1399.727775] loop4: detected capacity change from 0 to 40 [ 1399.732255] FAT-fs (loop0): bogus number of reserved sectors [ 1399.733322] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1399.738673] loop3: detected capacity change from 0 to 40 [ 1399.768310] loop7: detected capacity change from 0 to 40 22:27:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 17) 22:27:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:27:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1412.399627] loop2: detected capacity change from 0 to 40 [ 1412.410266] loop6: detected capacity change from 0 to 40 22:27:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 24) 22:27:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x600843, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000180)=""/42, &(0x7f00000000c0)=0x2a) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1412.423141] loop5: detected capacity change from 0 to 40 [ 1412.434749] loop1: detected capacity change from 0 to 40 22:27:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x5) dup(0xffffffffffffffff) 22:27:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, 0x0, &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1412.455317] loop0: detected capacity change from 0 to 40 [ 1412.462040] syz-executor.5: attempt to access beyond end of device [ 1412.462040] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1412.462894] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1412.463554] loop7: detected capacity change from 0 to 40 22:27:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 18) [ 1412.475737] FAT-fs (loop0): bogus number of reserved sectors [ 1412.476545] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1412.480209] FAULT_INJECTION: forcing a failure. [ 1412.480209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.482112] CPU: 1 PID: 8767 Comm: syz-executor.6 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1412.483084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.484055] Call Trace: [ 1412.484375] [ 1412.484662] dump_stack_lvl+0xc1/0xf0 [ 1412.485155] should_fail_ex+0x4b4/0x5b0 [ 1412.485670] _copy_from_user+0x30/0xf0 [ 1412.486177] kstrtouint_from_user+0xb0/0x170 [ 1412.486733] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1412.487376] ? lock_acquire+0x19a/0x4c0 [ 1412.487871] ? ksys_write+0x12b/0x260 [ 1412.488366] proc_fail_nth_write+0x7c/0x220 [ 1412.488903] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1412.489505] ? lock_is_held_type+0x9f/0x120 [ 1412.490047] vfs_write+0x2b8/0xd40 [ 1412.490492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1412.491108] ? __pfx_vfs_write+0x10/0x10 [ 1412.491623] ? __fget_files+0x270/0x480 [ 1412.492154] ksys_write+0x12b/0x260 [ 1412.492620] ? __pfx_ksys_write+0x10/0x10 [ 1412.493139] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1412.493782] do_syscall_64+0x3f/0x90 [ 1412.494253] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1412.494887] RIP: 0033:0x7faf6b9085ff [ 1412.495362] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1412.497446] RSP: 002b:00007faf68ecb170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1412.498344] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faf6b9085ff [ 1412.499204] RDX: 0000000000000001 RSI: 00007faf68ecb1e0 RDI: 0000000000000004 [ 1412.500049] RBP: 00007faf68ecb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.500895] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1412.501744] R13: 00007fffef66ab2f R14: 00007faf68ecb300 R15: 0000000000022000 [ 1412.502618] 22:27:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x7, 0xf0, 0x4) [ 1412.525627] loop4: detected capacity change from 0 to 40 [ 1412.528468] loop3: detected capacity change from 0 to 40 [ 1412.531236] loop2: detected capacity change from 0 to 40 22:27:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x7) dup(0xffffffffffffffff) [ 1412.574243] loop5: detected capacity change from 0 to 40 22:27:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:27:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 19) 22:27:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) [ 1412.638877] syz-executor.5: attempt to access beyond end of device [ 1412.638877] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1412.640509] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1412.645492] loop1: detected capacity change from 0 to 40 [ 1412.657763] loop7: detected capacity change from 0 to 40 [ 1412.662397] loop2: detected capacity change from 0 to 40 [ 1412.680137] loop6: detected capacity change from 0 to 40 [ 1412.683137] syz-executor.5: attempt to access beyond end of device [ 1412.683137] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1412.684641] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1412.704375] loop0: detected capacity change from 0 to 40 [ 1412.735711] FAT-fs (loop0): invalid media value (0x00) [ 1412.737327] FAT-fs (loop0): Can't find a valid FAT filesystem 22:27:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x2) 22:27:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 20) 22:27:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x8) dup(0xffffffffffffffff) 22:27:57 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7d94958d9576b67c5190ce11720346b49760524650604ca0817c8b8b8848c2b1e9ab43348b2fa017136c25fd8aa5db2b6667f82e398ae56eb1042f0d5a84899bbc565177c93d28fbf0d2dd0ad280586a5e61a2c63683bfd7253a181029d96654986d4d423dd0bcbad5ca626f20c7b06aa9c92aa630754beaa9e7f780b7a540ee7dc8a48f2fee657ad5f92f114c945526518ba73d1eb25532b25ef8ce570178fafeee0b6c3f5aea3167cfd5", @ANYBLOB="c63b26e5819f7e396ad54241d490fa2b95923a6adf8b5f098fb7011f9e012978b50cecd54cedb0ebbecd0ec2005b7275de7a431ae41211c8c09ff5148b28dd2aad9c7403d8f262acdd612f66853a56f7a7ae7eba9f0c1a61a8a0dd33604cdc3c8bb07e6931e824908b3bc81671f196263cdfd6f9", @ANYRES16, @ANYRES32=r4, @ANYRES64=r7, @ANYRES64=r0, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r8 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r9, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendfile(r8, r9, &(0x7f0000000000)=0x6, 0x6) sendfile(r2, r1, 0x0, 0xfffffdef) 22:27:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1425.488070] loop5: detected capacity change from 0 to 40 [ 1425.489504] loop3: detected capacity change from 0 to 40 [ 1425.491310] loop4: detected capacity change from 0 to 40 [ 1425.493318] loop2: detected capacity change from 0 to 40 [ 1425.496770] loop6: detected capacity change from 0 to 40 [ 1425.504239] loop1: detected capacity change from 0 to 40 [ 1425.512629] loop7: detected capacity change from 0 to 40 [ 1425.533403] loop0: detected capacity change from 0 to 40 [ 1425.577985] FAT-fs (loop0): invalid media value (0x00) [ 1425.579349] FAT-fs (loop0): Can't find a valid FAT filesystem 22:27:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 21) 22:27:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x9) dup(0xffffffffffffffff) 22:27:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x3) [ 1425.670857] syz-executor.5: attempt to access beyond end of device [ 1425.670857] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1425.672436] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:27:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1425.723390] loop1: detected capacity change from 0 to 40 [ 1425.734931] loop2: detected capacity change from 0 to 40 22:27:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623e"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:27:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1425.812705] loop6: detected capacity change from 0 to 40 22:27:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xa) dup(0xffffffffffffffff) [ 1425.858749] loop4: detected capacity change from 0 to 40 [ 1425.860778] loop0: detected capacity change from 0 to 40 [ 1425.874293] loop3: detected capacity change from 0 to 40 [ 1425.884310] FAT-fs (loop0): invalid media value (0x00) [ 1425.886205] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1425.913156] loop7: detected capacity change from 0 to 40 [ 1425.947221] loop1: detected capacity change from 0 to 40 22:28:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 22) 22:28:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r4, &(0x7f0000000140)="a3", 0x1) openat(r4, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:28:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:28:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x4) 22:28:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623e"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xd) dup(0xffffffffffffffff) [ 1438.252293] loop0: detected capacity change from 0 to 40 [ 1438.257847] loop5: detected capacity change from 0 to 40 [ 1438.258749] loop7: detected capacity change from 0 to 40 [ 1438.261221] loop6: detected capacity change from 0 to 40 [ 1438.266331] loop1: detected capacity change from 0 to 40 [ 1438.269738] loop2: detected capacity change from 0 to 40 [ 1438.280209] loop3: detected capacity change from 0 to 40 [ 1438.305362] FAT-fs (loop0): invalid media value (0x00) [ 1438.306435] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1438.309741] loop4: detected capacity change from 0 to 40 [ 1438.341868] syz-executor.5: attempt to access beyond end of device [ 1438.341868] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1438.343384] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:28:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xf) dup(0xffffffffffffffff) 22:28:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) (fail_nth: 23) 22:28:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x5) [ 1438.496997] loop6: detected capacity change from 0 to 40 [ 1438.511504] loop1: detected capacity change from 0 to 40 22:28:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x7) [ 1438.540030] loop2: detected capacity change from 0 to 40 22:28:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x1002840}], 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="3076690f77a6e6902c17b6276c1ad92a99fe06204f0ba2990bf6a94a2f980d9b04192008c43e3bca6b030db21e557c4f6a8fe6f880b14c0c4a9071c42337dbc0fa27cb1ecacc20fb5f8c6a260cb5cac03d2120c84deddf5ac1a8889b127e853fb0e8f0d2bd6523f3f8964f40c373d49988ba083cb93e16a5d355c098b6cc56311aa121c628cfee8f2d71b5341864cd4d0960eb772e3b19b43aed794277ef1a72cf34028437ee2e345b8be576e0ff5ae1f818256a16855e7733fddb10db9ce0fd31e6b447e5cf294b15092f4b698e6313b721fa5bb8ef4e4b1dd4485469c3dc398ea08d84ca53b33443867ecdb6733c"]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r0, &(0x7f0000000140)="a3", 0x1) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x101243, 0x25) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000000)=""/33, 0x21}) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) [ 1438.564884] FAULT_INJECTION: forcing a failure. [ 1438.564884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.566383] CPU: 1 PID: 8891 Comm: syz-executor.2 Not tainted 6.4.0-rc2-next-20230519 #1 [ 1438.567401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1438.568437] Call Trace: [ 1438.568772] [ 1438.569071] dump_stack_lvl+0xc1/0xf0 [ 1438.569580] should_fail_ex+0x4b4/0x5b0 [ 1438.570124] _copy_to_user+0x30/0xc0 [ 1438.570631] simple_read_from_buffer+0xd0/0x170 [ 1438.571239] proc_fail_nth_read+0x19c/0x230 [ 1438.571823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1438.572439] ? security_file_permission+0xb5/0xe0 [ 1438.573068] vfs_read+0x1e4/0x8b0 [ 1438.573530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1438.574149] ? __pfx_vfs_read+0x10/0x10 [ 1438.574677] ? __fget_files+0x270/0x480 [ 1438.575225] ksys_read+0x12b/0x260 [ 1438.575711] ? __pfx_ksys_read+0x10/0x10 [ 1438.576239] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1438.576917] do_syscall_64+0x3f/0x90 [ 1438.577410] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1438.578094] RIP: 0033:0x7f036719169c [ 1438.578580] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1438.580801] RSP: 002b:00007f0364754170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1438.581746] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f036719169c [ 1438.582630] RDX: 000000000000000f RSI: 00007f03647541e0 RDI: 0000000000000004 [ 1438.583534] RBP: 00007f03647541d0 R08: 0000000000000000 R09: 0000000000000000 [ 1438.584418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1438.585304] R13: 00007ffddf6c998f R14: 00007f0364754300 R15: 0000000000022000 [ 1438.586216] 22:28:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:28:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623e"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1438.652126] loop6: detected capacity change from 0 to 40 [ 1438.656493] loop5: detected capacity change from 0 to 65576 [ 1438.669888] FAT-fs (loop5): Unrecognized mount option "18446744073709551615" or missing value [ 1438.680205] loop7: detected capacity change from 0 to 40 [ 1438.687750] loop0: detected capacity change from 0 to 40 [ 1438.694772] loop4: detected capacity change from 0 to 40 [ 1438.696438] loop3: detected capacity change from 0 to 40 [ 1438.748323] FAT-fs (loop0): invalid media value (0x00) [ 1438.750204] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1439.503640] loop5: detected capacity change from 0 to 65576 [ 1439.506223] FAT-fs (loop5): Unrecognized mount option "18446744073709551615" or missing value 22:28:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x10) dup(0xffffffffffffffff) 22:28:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x8) 22:28:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "d8303d8522dd2837e51594bc5fc230c4a1fc0c0f"}, 0x15, 0x1) 22:28:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:28:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) [ 1450.943398] loop1: detected capacity change from 0 to 40 [ 1450.945344] loop2: detected capacity change from 0 to 40 [ 1450.967165] loop6: detected capacity change from 0 to 40 [ 1450.976432] loop7: detected capacity change from 0 to 40 [ 1450.999499] loop5: detected capacity change from 0 to 40 [ 1451.020776] loop4: detected capacity change from 0 to 40 [ 1451.028398] loop0: detected capacity change from 0 to 40 [ 1451.040540] loop3: detected capacity change from 0 to 40 [ 1451.043858] syz-executor.5: attempt to access beyond end of device [ 1451.043858] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1451.044703] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1451.077606] FAT-fs (loop0): invalid media value (0x00) [ 1451.078655] FAT-fs (loop0): Can't find a valid FAT filesystem 22:28:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x2) 22:28:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1462.863579] loop5: detected capacity change from 0 to 40 22:28:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:28:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x11) dup(0xffffffffffffffff) 22:28:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x9) 22:28:34 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) lseek(r0, 0x5, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:28:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1462.871755] loop0: detected capacity change from 0 to 40 [ 1462.875331] loop4: detected capacity change from 0 to 40 [ 1462.882467] FAT-fs (loop0): bogus number of FAT sectors [ 1462.883209] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1462.906995] loop1: detected capacity change from 0 to 40 [ 1462.913619] loop6: detected capacity change from 0 to 40 [ 1462.922270] loop2: detected capacity change from 0 to 40 22:28:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1462.931753] loop7: detected capacity change from 0 to 40 22:28:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1462.951428] loop3: detected capacity change from 0 to 40 [ 1462.986461] syz-executor.5: attempt to access beyond end of device [ 1462.986461] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1462.987372] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:28:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xa) 22:28:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x112) dup(0xffffffffffffffff) [ 1463.003229] loop0: detected capacity change from 0 to 40 [ 1463.006390] FAT-fs (loop0): bogus number of FAT sectors [ 1463.007019] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1463.012193] loop4: detected capacity change from 0 to 40 22:28:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x3) 22:28:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:28:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1463.095318] loop0: detected capacity change from 0 to 40 [ 1463.100661] loop1: detected capacity change from 0 to 40 [ 1463.116941] FAT-fs (loop0): bogus number of FAT sectors [ 1463.117400] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1463.122212] loop4: detected capacity change from 0 to 40 [ 1463.124473] loop7: detected capacity change from 0 to 40 [ 1463.136760] loop6: detected capacity change from 0 to 40 22:28:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1463.165501] loop2: detected capacity change from 0 to 40 22:28:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x300) dup(0xffffffffffffffff) 22:28:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1463.240754] loop1: detected capacity change from 0 to 40 [ 1463.272172] loop0: detected capacity change from 0 to 40 [ 1463.281609] loop3: detected capacity change from 0 to 40 22:28:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xd) 22:28:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0xa) recvfrom(r2, &(0x7f0000000240)=""/160, 0xa0, 0x0, &(0x7f0000000180)=@hci={0x1f, 0xfffd}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x418581, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r5, &(0x7f0000000340)='./file0\x00', 0x101000, 0x180) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1476.524121] loop5: detected capacity change from 0 to 40 [ 1476.525414] FAT-fs (loop5): Unrecognized mount option "18446744073709551615" or missing value [ 1476.526684] loop6: detected capacity change from 0 to 40 22:28:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x4) [ 1476.546552] loop0: detected capacity change from 0 to 40 [ 1476.550277] loop3: detected capacity change from 0 to 40 [ 1476.551925] loop2: detected capacity change from 0 to 40 [ 1476.554490] loop4: detected capacity change from 0 to 40 [ 1476.579287] loop7: detected capacity change from 0 to 40 22:28:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x500) dup(0xffffffffffffffff) 22:28:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:28:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xf) 22:28:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1476.612940] loop1: detected capacity change from 0 to 40 22:28:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x5) [ 1476.675382] loop6: detected capacity change from 0 to 40 [ 1476.720405] loop4: detected capacity change from 0 to 40 22:28:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1476.737242] loop2: detected capacity change from 0 to 40 22:28:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x505) dup(0xffffffffffffffff) 22:28:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:28:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x0, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1476.848353] loop0: detected capacity change from 0 to 40 22:28:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x10) [ 1476.890461] loop3: detected capacity change from 0 to 40 [ 1476.892674] loop1: detected capacity change from 0 to 40 22:28:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x7) [ 1477.004729] loop7: detected capacity change from 0 to 40 [ 1477.116909] loop6: detected capacity change from 0 to 40 [ 1477.141293] loop2: detected capacity change from 0 to 40 [ 1477.357884] loop5: detected capacity change from 0 to 40 [ 1477.360604] FAT-fs (loop5): Unrecognized mount option "18446744073709551615" or missing value 22:29:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x11) 22:29:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x506) dup(0xffffffffffffffff) 22:29:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1489.532144] loop6: detected capacity change from 0 to 40 22:29:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x89) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r4 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fallocate(r4, 0x13, 0xf66, 0x2) 22:29:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x0, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:29:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x8) [ 1489.543514] loop2: detected capacity change from 0 to 40 [ 1489.544665] loop3: detected capacity change from 0 to 40 [ 1489.558444] loop0: detected capacity change from 0 to 40 [ 1489.573217] loop7: detected capacity change from 0 to 40 [ 1489.585484] loop1: detected capacity change from 0 to 40 [ 1489.590971] loop5: detected capacity change from 0 to 40 [ 1489.595739] loop4: detected capacity change from 0 to 40 22:29:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x300) 22:29:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x9) 22:29:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1489.663509] syz-executor.5: attempt to access beyond end of device [ 1489.663509] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1489.665086] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1489.667716] loop6: detected capacity change from 0 to 40 [ 1489.670525] loop2: detected capacity change from 0 to 40 [ 1489.705888] loop3: detected capacity change from 0 to 40 [ 1489.707563] loop0: detected capacity change from 0 to 40 22:29:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x507) dup(0xffffffffffffffff) 22:29:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xa) 22:29:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x500) 22:29:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x0, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1489.798061] loop6: detected capacity change from 0 to 40 [ 1489.809449] loop2: detected capacity change from 0 to 40 [ 1489.812095] loop1: detected capacity change from 0 to 40 [ 1489.835311] loop7: detected capacity change from 0 to 40 [ 1490.418662] syz-executor.5: attempt to access beyond end of device [ 1490.418662] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1490.420913] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:29:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1502.393915] loop5: detected capacity change from 0 to 40 22:29:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x8002, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'macvtap0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) read$char_usb(r0, &(0x7f0000000240)=""/187, 0xbb) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:29:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xd) 22:29:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0x0, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:29:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x506) [ 1502.401655] loop2: detected capacity change from 0 to 40 22:29:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x509) dup(0xffffffffffffffff) 22:29:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1502.420518] loop1: detected capacity change from 0 to 40 [ 1502.432090] syz-executor.5: attempt to access beyond end of device [ 1502.432090] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1502.432967] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1502.435511] loop7: detected capacity change from 0 to 40 [ 1502.439573] loop6: detected capacity change from 0 to 40 [ 1502.451157] loop0: detected capacity change from 0 to 40 [ 1502.463696] loop4: detected capacity change from 0 to 40 [ 1502.469484] loop3: detected capacity change from 0 to 40 22:29:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xd00) 22:29:14 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) fgetxattr(r0, &(0x7f0000000000)=@random={'security.', '@\x00'}, &(0x7f0000000180)=""/69, 0x45) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:29:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xf) 22:29:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xd00) dup(0xffffffffffffffff) [ 1502.605065] loop5: detected capacity change from 0 to 40 [ 1502.610029] loop6: detected capacity change from 0 to 40 22:29:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0x0, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1502.631579] loop1: detected capacity change from 0 to 40 [ 1502.636466] loop2: detected capacity change from 0 to 40 22:29:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1502.696642] syz-executor.5: attempt to access beyond end of device [ 1502.696642] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1502.698163] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:29:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1502.727480] loop0: detected capacity change from 0 to 40 [ 1502.745872] syz-executor.5: attempt to access beyond end of device [ 1502.745872] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1502.747664] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1502.771281] loop7: detected capacity change from 0 to 40 [ 1502.782577] loop4: detected capacity change from 0 to 40 [ 1502.800424] loop3: detected capacity change from 0 to 40 22:29:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x10) 22:29:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d318779"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0x0, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:29:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[@ANYRES64=r5, @ANYRESDEC], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) ftruncate(0xffffffffffffffff, 0x401) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x80000) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1516.528555] loop2: detected capacity change from 0 to 40 [ 1516.544975] loop1: detected capacity change from 0 to 40 [ 1516.547982] loop6: detected capacity change from 0 to 40 [ 1516.555760] loop3: detected capacity change from 0 to 40 [ 1516.575362] loop4: detected capacity change from 0 to 40 [ 1516.582686] loop7: detected capacity change from 0 to 40 [ 1516.587776] loop5: detected capacity change from 0 to 40 22:29:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1100) dup(0xffffffffffffffff) 22:29:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1100) [ 1516.604312] loop0: detected capacity change from 0 to 40 22:29:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x11) 22:29:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x2ffb) dup(0xffffffffffffffff) 22:29:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d318779"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x4000) [ 1516.675401] loop2: detected capacity change from 0 to 40 [ 1516.693100] loop1: detected capacity change from 0 to 40 [ 1516.706166] loop3: detected capacity change from 0 to 40 [ 1516.706656] loop6: detected capacity change from 0 to 40 22:29:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x300) [ 1516.752334] syz-executor.5: attempt to access beyond end of device [ 1516.752334] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1516.754109] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:29:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x0, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:29:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1516.818949] loop2: detected capacity change from 0 to 40 [ 1516.826364] loop7: detected capacity change from 0 to 40 [ 1516.846440] loop4: detected capacity change from 0 to 40 22:29:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x4100) 22:29:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x4000) dup(0xffffffffffffffff) 22:29:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x0, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:29:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d318779"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x500) 22:29:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:40 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0400080101000440002000f80100"/23, 0x6b}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = dup(r2) fcntl$getflags(r4, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r5, r3, 0x0, 0xfffffdef) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000000)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) [ 1528.157375] loop7: detected capacity change from 0 to 40 [ 1528.157641] loop1: detected capacity change from 0 to 40 [ 1528.160609] loop6: detected capacity change from 0 to 40 [ 1528.161238] loop3: detected capacity change from 0 to 40 [ 1528.163086] loop2: detected capacity change from 0 to 40 [ 1528.170241] loop5: detected capacity change from 0 to 40 [ 1528.171678] FAT-fs (loop5): bogus number of reserved sectors [ 1528.172147] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1528.174383] loop0: detected capacity change from 0 to 40 [ 1528.229188] loop4: detected capacity change from 0 to 40 22:29:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x505) 22:29:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x0, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x4100) dup(0xffffffffffffffff) 22:29:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x8100) 22:29:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x0, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1528.366649] loop1: detected capacity change from 0 to 40 [ 1528.372989] loop2: detected capacity change from 0 to 40 [ 1528.435471] loop0: detected capacity change from 0 to 40 22:29:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1528.470331] loop3: detected capacity change from 0 to 40 [ 1528.471758] loop7: detected capacity change from 0 to 40 [ 1528.495224] loop6: detected capacity change from 0 to 40 22:29:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xd00) 22:29:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x8100) dup(0xffffffffffffffff) [ 1528.619708] loop4: detected capacity change from 0 to 40 22:29:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1528.733510] loop1: detected capacity change from 0 to 40 [ 1528.755325] loop2: detected capacity change from 0 to 40 [ 1528.813785] loop3: detected capacity change from 0 to 40 [ 1529.071976] loop5: detected capacity change from 0 to 40 [ 1529.082711] FAT-fs (loop5): bogus number of reserved sectors [ 1529.083518] FAT-fs (loop5): Can't find a valid FAT filesystem 22:29:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1541.471200] loop1: detected capacity change from 0 to 40 [ 1541.472266] loop4: detected capacity change from 0 to 40 [ 1541.476011] loop3: detected capacity change from 0 to 40 [ 1541.478266] loop2: detected capacity change from 0 to 40 [ 1541.489031] loop6: detected capacity change from 0 to 40 [ 1541.497167] loop5: detected capacity change from 0 to 40 [ 1541.499510] FAT-fs (loop5): invalid media value (0x89) [ 1541.500000] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1541.503550] loop7: detected capacity change from 0 to 40 22:29:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x0, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1100) 22:29:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xfdef) 22:29:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xfdef) dup(0xffffffffffffffff) 22:29:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}, {&(0x7f0000000240)="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", 0x1000, 0x6}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x501042, 0x80) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1541.560547] loop0: detected capacity change from 0 to 40 22:29:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x4000) 22:29:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1541.636756] syz-executor.6: attempt to access beyond end of device [ 1541.636756] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1541.637829] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 1541.638688] loop2: detected capacity change from 0 to 40 22:29:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x0, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1541.682121] syz-executor.1: attempt to access beyond end of device [ 1541.682121] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1541.683087] Buffer I/O error on dev loop1, logical block 31, lost async page write [ 1541.689377] loop3: detected capacity change from 0 to 40 [ 1541.693695] syz-executor.1: attempt to access beyond end of device [ 1541.693695] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1541.694673] Buffer I/O error on dev loop1, logical block 31, lost async page write 22:29:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1541.709482] loop4: detected capacity change from 0 to 40 22:29:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x4100) 22:29:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xff00) 22:29:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xff00) dup(0xffffffffffffffff) [ 1541.780632] loop7: detected capacity change from 0 to 40 22:29:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x0, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:29:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1541.860751] loop6: detected capacity change from 0 to 40 [ 1541.867002] loop2: detected capacity change from 0 to 40 [ 1541.897583] loop0: detected capacity change from 0 to 40 [ 1541.902355] loop1: detected capacity change from 0 to 40 [ 1541.923396] loop3: detected capacity change from 0 to 40 [ 1542.031671] syz-executor.6: attempt to access beyond end of device [ 1542.031671] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1542.032593] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 1542.044491] syz-executor.1: attempt to access beyond end of device [ 1542.044491] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1542.045329] Buffer I/O error on dev loop1, logical block 31, lost async page write [ 1542.059513] syz-executor.1: attempt to access beyond end of device [ 1542.059513] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1542.060408] Buffer I/O error on dev loop1, logical block 31, lost async page write [ 1542.334647] loop5: detected capacity change from 0 to 40 [ 1542.336535] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value 22:30:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20002, 0x18) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x80000) dup(0xffffffffffffffff) 22:30:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x0, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:30:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x8100) 22:30:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x80000) 22:30:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1555.403130] loop6: detected capacity change from 0 to 40 [ 1555.425367] loop3: detected capacity change from 0 to 40 [ 1555.427768] loop0: detected capacity change from 0 to 40 [ 1555.471238] loop2: detected capacity change from 0 to 40 [ 1555.473568] loop5: detected capacity change from 0 to 40 [ 1555.479229] loop1: detected capacity change from 0 to 40 [ 1555.513749] loop4: detected capacity change from 0 to 40 [ 1555.531512] loop7: detected capacity change from 0 to 40 [ 1555.544918] syz-executor.6: attempt to access beyond end of device [ 1555.544918] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1555.547464] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 1555.594522] syz-executor.5: attempt to access beyond end of device [ 1555.594522] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1555.596081] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:30:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x800, 0x1ab05863}, 0x100, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:30:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xfffffdef) 22:30:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xfdef) 22:30:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1555.771926] syz-executor.1: attempt to access beyond end of device [ 1555.771926] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1555.773445] Buffer I/O error on dev loop1, logical block 31, lost async page write [ 1555.790588] syz-executor.1: attempt to access beyond end of device [ 1555.790588] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1555.792133] Buffer I/O error on dev loop1, logical block 31, lost async page write 22:30:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x0, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1555.818313] loop3: detected capacity change from 0 to 40 22:30:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1555.856984] loop6: detected capacity change from 0 to 40 [ 1555.874081] loop2: detected capacity change from 0 to 40 [ 1555.875145] loop5: detected capacity change from 0 to 40 22:30:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xfffffdef) dup(0xffffffffffffffff) [ 1555.920580] loop4: detected capacity change from 0 to 40 [ 1555.923760] loop0: detected capacity change from 0 to 40 [ 1555.983582] syz-executor.5: attempt to access beyond end of device [ 1555.983582] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1555.985229] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1555.995535] loop1: detected capacity change from 0 to 40 [ 1556.000601] loop7: detected capacity change from 0 to 40 [ 1556.038664] syz-executor.6: attempt to access beyond end of device [ 1556.038664] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1556.040192] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 1556.042386] syz-executor.2: attempt to access beyond end of device [ 1556.042386] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1556.043942] Buffer I/O error on dev loop2, logical block 31, lost async page write 22:30:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0x0, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xff00) 22:30:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1556.232762] loop4: detected capacity change from 0 to 40 [ 1556.246953] syz-executor.1: attempt to access beyond end of device [ 1556.246953] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1556.248949] Buffer I/O error on dev loop1, logical block 31, lost async page write [ 1556.258669] loop3: detected capacity change from 0 to 40 [ 1556.283889] syz-executor.1: attempt to access beyond end of device [ 1556.283889] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1556.285425] Buffer I/O error on dev loop1, logical block 31, lost async page write [ 1556.311978] loop2: detected capacity change from 0 to 40 [ 1556.362662] loop0: detected capacity change from 0 to 40 [ 1556.452603] syz-executor.2: attempt to access beyond end of device [ 1556.452603] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1556.454050] Buffer I/O error on dev loop2, logical block 31, lost async page write 22:30:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) fallocate(r4, 0x4, 0x6, 0x3ff) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) [ 1568.378901] loop5: detected capacity change from 0 to 40 [ 1568.379478] loop6: detected capacity change from 0 to 40 [ 1568.389772] loop2: detected capacity change from 0 to 40 22:30:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x7ffffffffffff) 22:30:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0x0, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x80000) 22:30:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:30:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x7ffffffffffff) dup(0xffffffffffffffff) 22:30:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0), 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1568.443257] loop7: detected capacity change from 0 to 40 [ 1568.446238] bio_check_eod: 1 callbacks suppressed [ 1568.446248] syz-executor.6: attempt to access beyond end of device [ 1568.446248] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1568.447447] buffer_io_error: 1 callbacks suppressed [ 1568.447455] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 1568.462001] syz-executor.2: attempt to access beyond end of device [ 1568.462001] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1568.462920] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1568.464486] loop3: detected capacity change from 0 to 40 [ 1568.468355] loop0: detected capacity change from 0 to 40 [ 1568.472274] loop1: detected capacity change from 0 to 40 [ 1568.484103] syz-executor.5: attempt to access beyond end of device [ 1568.484103] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1568.485739] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1568.487414] loop4: detected capacity change from 0 to 40 22:30:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xfffffffffffffdef) 22:30:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xfffffdef) [ 1568.541972] syz-executor.5: attempt to access beyond end of device [ 1568.541972] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1568.543720] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1568.588232] loop6: detected capacity change from 0 to 40 [ 1568.590626] loop2: detected capacity change from 0 to 40 22:30:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:30:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0), 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1568.615531] syz-executor.1: attempt to access beyond end of device [ 1568.615531] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1568.617334] Buffer I/O error on dev loop1, logical block 31, lost async page write 22:30:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1568.635292] loop0: detected capacity change from 0 to 40 [ 1568.637622] loop3: detected capacity change from 0 to 40 22:30:20 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001540)={0x0, 0xffffffff00000000, @status={[0x2, 0x0, 0x7, 0xa3f4, 0x8, 0xfffffffffffffffe]}, [0x20, 0x7fff, 0xfff, 0x7, 0x1, 0x1, 0x7, 0x67, 0x2, 0xef, 0x1, 0x1, 0x7, 0x3a, 0xbd0, 0x0, 0x2, 0x8, 0x9, 0x1, 0x6, 0xf6, 0x4, 0x9, 0x5, 0x6, 0x7fff, 0x400, 0x5, 0x0, 0x6, 0xfffffffffffffcef, 0xfffffffffffffff8, 0xfffffffffffffffb, 0x20000000000000, 0xe00000000000000, 0x1, 0x1, 0x1, 0x400, 0x3, 0x1, 0x0, 0x8, 0x4000000040, 0x7f, 0xfffffffffffffffe, 0x1, 0x3, 0x88a, 0x800, 0x6, 0x8, 0x5d19, 0x1ff, 0x2800000000000, 0x9, 0xffff, 0x5, 0x8, 0xfffffffffffffffa, 0x0, 0x7fff, 0x3ff]}) pread64(r2, &(0x7f0000001440)=""/215, 0xd7, 0xb2a000) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000340)="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", 0x1000, 0xa8}, {&(0x7f0000001340)="3fe0d64e6b4c52a079c477556c23617f73686cd975d03046a59bd2d2d731657757902b5d779029efa5f92bbcb899cedf5c41825809d1bade2808e5b3a212338a5c28f53c6cdda45cf548c783dd20fbc6e3f1d31d19fb9df50da1805e703ea4a3e47c44e8ea88b456f641393e58ba4e7ebbd7dd67ad3e70e7d269e047d781a6862f8459fa40f7aaee5d5a7ee4d1ad1851b2486aa10644f5b2be86fff64651abe9bdbf6f80df61552fa712b8c64025a5154ca2b4b0374155f38bdf1d9794e9a6738df4a2a04888f394cf4999b3766e45ef870cc3b0b1d8", 0xd6, 0x81}], 0x402, &(0x7f0000000180)={[{':%:}-'}, {'{'}, {'vfat\x00'}], [{@fowner_lt={'fowner<', 0xee01}}]}) write(r3, &(0x7f0000000300)="8f", 0x1) [ 1568.670913] syz-executor.1: attempt to access beyond end of device [ 1568.670913] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1568.672575] Buffer I/O error on dev loop1, logical block 31, lost async page write 22:30:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = getgid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="8a4fbc161c964fe6b66f28ee7a5c966a67877b96b1c7af48bc367deae963b3d1019eeea40e0e2aa5eaec19b85787e253e8c4d16c56024b04bdfc84b0261029b24602357705d85ae1975da4168783b37d5fa7df1b3c1ca121a05d2c00c469c00fca0829c33bb6bd77508b715cd078046f10f02b4dceeb8344100e337997f03ecc849686cf739a31640501b2e964b08595fa54", 0x92}], 0x20420, &(0x7f0000000300)={[{@noinit_itable}, {@resgid={'resgid', 0x3d, r0}}], [{@measure}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '\\'}}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@appraise}, {@smackfsfloor}, {@uid_lt={'uid<', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) [ 1568.718919] loop6: detected capacity change from 0 to 40 [ 1568.721418] syz-executor.2: attempt to access beyond end of device [ 1568.721418] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1568.723126] Buffer I/O error on dev loop2, logical block 31, lost async page write 22:30:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0x0, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1568.752668] loop7: detected capacity change from 0 to 40 [ 1568.813584] loop5: detected capacity change from 0 to 40 [ 1568.853404] loop4: detected capacity change from 0 to 40 [ 1568.878709] syz-executor.5: attempt to access beyond end of device [ 1568.878709] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1568.880462] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:30:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0), 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') recvfrom$unix(r0, &(0x7f0000000000)=""/21, 0x15, 0x2100, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240), 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) 22:30:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x7ffffffffffff) 22:30:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:30:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x8) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000000)={0x1, 0x8, 0x2f34}) 22:30:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x0, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1581.949624] loop4: detected capacity change from 0 to 40 22:30:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xfffffffffffffdef) dup(0xffffffffffffffff) [ 1581.951603] loop1: detected capacity change from 0 to 40 [ 1581.959675] loop2: detected capacity change from 0 to 40 [ 1581.961354] loop5: detected capacity change from 0 to 40 [ 1581.964259] loop7: detected capacity change from 0 to 40 [ 1581.989499] loop0: detected capacity change from 0 to 40 [ 1582.013726] loop6: detected capacity change from 0 to 40 22:30:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x4, 0x0, &(0x7f0000000200), 0x30472, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write(0xffffffffffffffff, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:30:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1582.049238] syz-executor.5: attempt to access beyond end of device [ 1582.049238] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1582.051163] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1582.072594] syz-executor.2: attempt to access beyond end of device [ 1582.072594] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40 [ 1582.073523] Buffer I/O error on dev loop2, logical block 31, lost async page write [ 1582.079605] loop3: detected capacity change from 0 to 40 [ 1582.094773] ======================================================= [ 1582.094773] WARNING: The mand mount option has been deprecated and [ 1582.094773] and is ignored by this kernel. Remove the mand [ 1582.094773] option from the mount to silence this warning. [ 1582.094773] ======================================================= [ 1582.127911] loop7: detected capacity change from 0 to 40 22:30:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0xfffffffffffffdef) 22:30:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x0, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1593.863774] loop5: detected capacity change from 0 to 40 22:30:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:45 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) chdir(&(0x7f0000000000)='./file1\x00') 22:30:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x52100, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:30:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000180), &(0x7f0000000000)=0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) r5 = memfd_secret(0x80000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xa, 0x4, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x4810) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r0, 0x0, 0xfffffdef) 22:30:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:30:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1593.879724] loop4: detected capacity change from 0 to 40 [ 1593.881554] loop6: detected capacity change from 0 to 40 [ 1593.893294] loop0: detected capacity change from 0 to 40 [ 1593.895206] loop2: detected capacity change from 0 to 40 [ 1593.903547] loop1: detected capacity change from 0 to 40 22:30:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x0, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1593.929333] loop3: detected capacity change from 0 to 40 [ 1593.945887] syz-executor.5: attempt to access beyond end of device [ 1593.945887] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1593.947533] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1593.950311] loop7: detected capacity change from 0 to 40 22:30:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, &(0x7f0000000500)=""/119, 0x77, 0x40002001, &(0x7f0000000580)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1ff, 0x3, &(0x7f0000000340)=[{&(0x7f0000000180)="1720e9c1d2b259313d05e5f70689ebcc6108d0a213bbeff4f10360156abdd7904d3a827253d531e670290a5e38185f80375b2f5d17fde78b784e4205e36f61f506fa4c6e4ec21277ec087cd4c5f2f24c0d1d", 0x52, 0x6}, {&(0x7f0000000240)="c411b219bcec0dfa61eb93988d832c84b987450901a71c377f0a232aa2289177a47b65180b8c5ee4d9d4a11d3e1075", 0x2f, 0xa6f}, {&(0x7f0000000280)="6a906d8ae3ac8d551f5c5efd418f126143b3f67329dd6b2a9bcf56b541740e4090748bf62f26ae8bb2767066604d705e93b0e27dc66f9743ee7174d1b9", 0x3d, 0x400}], 0x1008040, &(0x7f0000000440)={[{@huge_within_size}, {@huge_never}, {@mode={'mode', 0x3d, 0x2}}], [{@smackfsfloor}, {@uid_gt={'uid>', r2}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x32, 0x33, 0x65, 0x33, 0x39, 0x64, 0x32], 0x2d, [0x33, 0x65, 0x38, 0x63], 0x2d, [0x36, 0x62, 0x30, 0x6f], 0x2d, [0x64, 0x37, 0x33, 0x63], 0x2d, [0x64, 0x36, 0x62, 0x35, 0x35, 0x32, 0x64, 0x36]}}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\('}}]}) dup(0xffffffffffffffff) fallocate(r0, 0x48, 0x6, 0x1) [ 1593.985410] loop4: detected capacity change from 0 to 40 22:30:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x180410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) pidfd_getfd(r1, r0, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) [ 1594.021091] loop1: detected capacity change from 0 to 40 22:30:46 executing program 6: fork() r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000180), 0x800) write(r1, &(0x7f0000000300)="8f", 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x100) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x10, r0, 0xbd1ef000) 22:30:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1594.082484] loop2: detected capacity change from 0 to 40 [ 1594.107575] loop2: detected capacity change from 0 to 40 22:30:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) open(&(0x7f0000000040)='./file1\x00', 0x4000, 0x0) 22:30:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1594.146230] loop0: detected capacity change from 0 to 40 [ 1594.150409] loop6: detected capacity change from 0 to 40 22:30:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:30:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) timerfd_gettime(r1, &(0x7f0000000040)) [ 1594.154646] loop4: detected capacity change from 0 to 40 [ 1594.171661] loop1: detected capacity change from 0 to 40 [ 1594.216159] loop2: detected capacity change from 0 to 40 22:30:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1594.249777] loop3: detected capacity change from 0 to 40 [ 1594.250707] loop7: detected capacity change from 0 to 40 22:30:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6, 0x6, &(0x7f0000001500)=[{&(0x7f0000000340)="00f1e7a62715e74f4a01de6b946950f5b307e0ec30acfbe821b375f07d86b65d67da623ea67de203b7e618fbcf023b2fd3f5eda81c88c620004953d80e5abcdebbce243c377c751568d419fa312ff44aa29cebd45479930ef0543d5275c668d1f662f86128ba939af609c3416fb92b8e2da9ac58a889cef511c6332b4f7dbf974ad50211a07ec9f8b9d06998f37b40287bc1b7e55bcc594ca72aa805be9baef496bc1bc6a448f408f1127068d5244e2973ed92e89edc7da1c0899e6807e5ee4a121b21549faa6b914912848236ac79de7770060ca983a49a421e5186cd0e", 0xde, 0x7fffffff}, {&(0x7f0000000180)="54083569f831f1d77f3414c28ccc4dbcd6ef137256e732d941ebb0710297f6a4c59c6fa6743c2e420ce64a2b909f001fb9e1285e25a63c5391e18e3484e21112f2", 0x41, 0x4}, {&(0x7f0000000240)="2d6185b24583d87f34aded21bfbddf3977deb20cb7461859c92e6aef45dcf7b42af3fcb8a0aaf677e6dc090ca36378a96682f989406848538ee695299f269e170c4d94f5aa5c9271d2b01fbb920bb850e474becfbb37e3027abbbf982b810502f2d759ef01e7def3b457ad09b9ac78db2bb17a0acb1d8595bf474d35bba3008d3561b2c251c0d12d46eb4c842d5a359efe9d6b0804", 0x95, 0x7}, {&(0x7f0000000440)="df49353539f5831f25766ec6d3cac6cfaba7004a004bfb83ebc118e35dbc471f9767c91485dd49659693f2493c95d8d6e831d109dcce96a878fb5f2fbefabe244cc988fb9b1fd6efe5e0da9426b4d37aa4cec072d8d7eb2fe12a01346cdae3aa64b907b6758f197330c8c95873dc373c35b11d681f4fe1d1c11cf799697f0c3272ee9165fc085b265af4a5cbf9df5b625a8770d5b51bdaa3e0b59245c2e7bb75a00cb46d5d6e62e5baec633174425c85a726dcfb", 0xb4, 0x80}, {&(0x7f00000000c0)="b9c81a8b9446e823da6267eb44fd0403c30f98a6853de3bec0fb96277d5cf35b8870a73be8a1c27d", 0x28, 0xffffffffffffffff}, {&(0x7f0000000500)="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", 0xffffffffffffff92, 0x6}], 0xa000, &(0x7f00000015c0)=ANY=[@ANYBLOB="687567653d77697468696e5f73697a652c726f6f74636f6e746578743d738bf53e582530875739"]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) [ 1594.303781] loop4: detected capacity change from 0 to 40 [ 1594.320259] loop0: detected capacity change from 0 to 40 [ 1594.350212] loop2: detected capacity change from 0 to 40 [ 1594.752184] syz-executor.5: attempt to access beyond end of device [ 1594.752184] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1594.754116] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:30:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) 22:30:59 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2051001, &(0x7f0000000140)=ANY=[]) pread64(r0, &(0x7f0000000400)=""/254, 0xfe, 0x4) r1 = syz_io_uring_complete(0x0) renameat(r1, &(0x7f0000000000)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240), 0x2006001, &(0x7f0000000340)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@uname={'uname', 0x3d, '-['}}, {@access_any}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@uname={'uname', 0x3d, '^-}'}}, {@debug={'debug', 0x3d, 0x9}}, {@loose}], [{@uid_lt={'uid<', 0xee00}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = dup2(r2, r0) openat(r3, &(0x7f00000000c0)='./file0/file0\x00', 0x230000, 0x32) write(r2, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) [ 1607.345223] loop1: detected capacity change from 0 to 40 22:30:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:30:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:30:59 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3, 0x9, &(0x7f0000003440)=[{&(0x7f0000000180)="6ce0a6720e4ea44f52638aa93477b1d21fff077acc471cb7d7153eba47553a8c6612c8ba166ef1f0311dd627b0946b3671bcb23ca7ed0b1a8f44b624d390d459229f93b8f8769e79c7b62eb716c3ac5135c57d4ac98b02be809f13c939", 0x5d, 0x8}, {&(0x7f0000000340)="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", 0x1000, 0x20}, {&(0x7f0000001340)="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", 0x1000, 0x40}, {&(0x7f00000000c0)="8a7aeb023dc27ccf8950b580b40b4309bc4543e419672018f1", 0x19, 0x9}, {&(0x7f0000000240)="a693466c41c54dce971870edc700da9317bcc290fdd6311ff413659387789a7bb552fe4a68f84a9eecb55014708104af32c8a8f22b81e4545afb7a47e62b52906e81778b01b3d5bab6057e73fe3845d2b8b7e657e778ec46c6e0f7c1e10eebd73063164d275f77fe131ae17ef2b6d1c043911402d65426541bca121d31ea4c1778a73a7b953f0d9bb2d05d8a54c317ddc0d6417779e12eb5bf94dbc6784a96b8aa0fe3e7d9bd856638f6184a98672e549a9250fe07a20110a9d92a42", 0xbc, 0xfffffffffffff379}, {&(0x7f0000002340)="a380da8456df2bd339faa6a48f91a51adb9a73456e64914cdb232b99ed4359d63ece68acbb32252edcdfb4966e2a", 0x2e, 0x40}, {&(0x7f0000002380)="0444002d918533f6c386e9177a1dc75aa235b3439102f5a235ee76cc9963e417da0ea3db03c46362026e2ad6e83f3982d45b7346534cd37f34a30dd7a358135d321984e9d663172c1f027e648faca904a4043fbb702831371534", 0x5a, 0x8000}, {&(0x7f0000002400)="7fe9de3501f62c83e96fabc84cfdead002ad52b1c56d7c7ad5cbf9fe7bb6ca739ff40812592d6f182409442e3d5a3c070e7d106bbd89e41866907bd7a52c35540f83c2deeca76c6eb5cb8978d48d465138d59690fff25a68ef222c5c22823ae3529170eee86542fca24d3ac2c2d1e6c89f943951bb8b4ab9c289da949dab5bb3746ed04ffb3304afc6c131713f7b0ffdf0c35486a305349993befdda71ad6754470c7194404604ae4dbc3e558717491e144e021bbbc141e943998f8419bbd77325bba204c5aec81f758d25c5589b2321fcb70a3a1568df6edd992b9ef09b5ed65e49910e504fbef4c35757645767ee5ec7ceefcb37451067e3bd5a351ac04a978527b2ee7e06ad4caa8722c8c4f471b2da10e7b46720eb40e97df62362c8b23cce4d154bfc635a31cbea3b7b022be8931c91208af6ad886b926cf07080cec9be7e9a7ec4407740e996da8eb41c77e5ed3b676b3bcb326e4c6676ad9864acbda96886fdf508fd0574496e15e22ee3c5ccf85568c4153c810c0ebf7f240fd9498d021b29795f563d1b164dde9dab7a6b31f4ebe8b17eb1f2988a8c3a7b07f8261ee1d89d120c0a3e2ab1dd566509c648faa44613139651efded990b65ad78f21f85ad4e0424a5f421c6e9978ba5853b57e17b54d481ea1493c65e3f2b71234bf4ebaeafa64115437481b98cc50cdcd7a126ccc74dab4cc9e3b0c82ffb1689b671cf04d01e68ebe2f28e20084b4d84f748e29881d54236d7c79e60d6c3aa3d2974cb59f7349b7d54bc12928b779f8be3bf9901a20957f9f7132d524fe98ad1cafd2697fa94da9f92becfb3e15f514850d842ea7cbb6da75b1da445fc3ef0d139064d6199d6d32f8b657bc113ef9954e7cbf57bb38c2638478db3f436c9198f85664c00168c2f28554a51653edbd7f4be0570a1386e703436ea4ab922483cae1cf7bb5b7cad559ea1fa76414050e094e4a5ff477689c0466722d4cdd3979e744aa9b8b1534fc79d84d912c1352782bbd57c08c94269bcd941804a5492e1665b40629ede704487b235010fd965531332131af120f719e6a45edca0619733efe3521c21ede60b520b97bebf74ad886c8b2ba7b6af368bda7d0a872c171859e6fafc39949cc8ce203eb8cf1070cd2c4d6c7f39403c0da89b29744285b54c7a71457949a42212971e53e9334892c8855009c7b77a0594be192b9600faa557430b65f1d93ace1954abc87c15b62672887e37ec56b74bdce048e1d38a0d5b335a1c2478b4b0c6d063426beb644c57bbe6fbc818b72f6e18b5e6f7af0e71107c36e8b48095ff189d7c75e432c057f394641fbb0ce0ae221f39508c737861e11ac6abac6f7b2e5f16d709909dbbc9c61c0685cad10a2f0f4d94939fae55c51ac376251744b5adbb60d85f20aaf2f5284e7d990d1e6fb15d69983f96dbcda9c37125d2959401288af217da8a86f9ea85d7e7c04462fc60832f1f6061097547cada5b016e9aa15504b35b31ce9ec160b3a2cdef1252eda4f9714ab844c28f1d5f9c4e4f99515ae7efe24ebdde9df60c127a594748f6a0166b7fcde3e83799fb789def1f167b86bc5a23fda9fc1e143102f094c802aed471bc935b8b73800a869cfa2cc5a7bcb7b0ae80785dad9df62c88c2c2d60fe401b662d0386d498f08b68c3146c8b6c54f5f29f2e34589b67ec2527fcd8f398cd3806bd3fb23c0f1e7164422854558b15a523808e258dbe1ff3975c0b41b937864f6e1eb4d1f511e51b0009f35860b311d0a358b6cbce8da0fbaf3e69b7ad32cc556e629e11c960af5ac17707b1bb5f4d9cb2e0abf26d191520eea2461bab74b8348af04b25e41bd5bc7ce2d666c0aee1badb3d2f6bcf54a1c468cf25d06d6daa37a976e7024835ee925f39509292f84f1bc254df8fced45c25882a2af7062a4528bdef9c8e30cbb4e6793565a4ca965289dfc76c1d98b96f71ea9010a7a3ace3235e2e5fe6aa4734a2b496ce79fc43c43713a8ac39a4432907b43b9478934d10cf3be571b91d1e023ab78f344184f598833c909fe8c568cd7ab8f119140806e4f44e3d80c0edb8aa11419a57b337102b79199b07fb39fe6b81d98cca0cd31af68a63f2841c42c65ef4a7cdfecd88448293bc7553da90ab55ab96bf78afdaec2607b12eb72546bf74b20372adf400b791bddf4629fc54f6652e9407b80262896930bda676b3b9a49f33319b0d01e1a3279e26f861e52fc0d8711d3c4a3313d050d2afb5876866b4b0f270a0317745b8c886eeb7fbd90df86540164613e06479f364f15bd7d9fd8aaff95d9a885451463dcdd7de6d45369f695c43f8b269eaf95c5abbd1be722d300eeb1f8f4126904ec1336f94e17cd0975e3fdde174c09f2a1d13ce27533085cc35fe0078208d0da9fc8ecd60d04fa3fc7ec3615c24a9d0eef6ff3a396ede6c3e07840496e20a7cc172a9978e172082cffbba414be7d7dd255747434f53be3439a6d4507b5824889e9501726a785ef521292781d3fb5fcbc95fe9c1c0fb28728037be6faa2b031c2ee219a7e0630fc1adab9ad9004aa18dcdef987b1ff8660c7367ca71bd5c0e8e772f8db04ccb0472d99837903cdcc63868f295bddac956f614dbd87b1195abe625a1f42b658156f606b05f31d957dfaa110e36e88cc8c43abc5226b71ef8ce40b115a6449d4e45f213ab9d9ca3b633c8097bc7be230452600c5ce63e1a5e7318ccb43898eb3c8dc6cff476ba4560ae943b856ba956962ab2bf2abd792d7407b8ee46df67aeb72205e2f2bd292b7026b853d1b97e6aef011b57e2f8f9c700ee3f2277d6c6a7560798dbb0f215143d86b65fe4d1d8f774c268b672b05010c4e41aa25c6bf0f088f8025d415b10e5f3ec72986ed1e6e424957cf85ce0b7b5148054634d9c7961a9c0903ffaefaf88bf330a0123305727a150c86bbfed3531b382b1b8460933821a316478f440573cc92f288501927f34680ecad1cd3f058f0a650bbbfbaf0a10b559024cc07297f3c06f970d2d5323e28bc7156bb9b3d2dfce57963ccfee7d12891dbaa0ebe72e70205a58aae1d24cba5008e99247dd39a9a498d6efa8a1bf20083312387e7922894d7244699f63ed1f54a24276c26516ebbca5675dc17423a530a32217ff41038d0dd880ab52373b3f87b5adb4dc4f58b17fc16df520a898ecaf26a184b426f0ab30ebe89c7d33a7851a8338a6c6cf82563bced478935365b974455ac6f64f92c5d0640e38b62b9344210ec4385c42d4317201956f273b32b734c791fbbcbe3cdc5fe56e4b6288d5e83f15ff98c4ff8692923bf57cabbabe6f472320c42600381c0991a709008a5987414e6b0b4c45bcb06052cdbe8674fdf8925e30f3f84f1300efd52e6aa4bc6f063828da390a2f1dc2f7dd9d7926d43486f24c74c10593b41c805b2486d44a0d75789690226a5da48a7eafd18838911e17bec3e182c9d8191570dd00c984667c8977ff48ee11f98ab8343497e55dcac86f754aa9f2d6f43e6ecb67b77694a900eb6a6a60753db75ffc5c4e8a955297d48a8479c8585279f30ee547cbe8bddfcb9c3e1033fd6bf2404f1f49b89cd5151fe312e1532c1d8114e205d0095ae33caafbe326048583707c06cc885255171ed94a6626f1b7f6866d44582b556628a5a622b84f1f74f3b5853dca9f08e621292f2befd7f0af8ada13c419499ad94d83b23331afda92757711fd0023340474f07ae17f44acac665d2ab09cd3ea3b906d59218d0f568cd3b004278043397b071d1e18c6c968d529bab7dcf601dec0aa7dfbd5d7bbb734ae3bc4679f32146b9008cd28a6dc0e8563c2996eb9a734d31ab8c687268994afc1ce67237b7b98fb798f7632e3794b0860a8ed4b27cc41c53980ac53368bb562a6a8d30dc561a3876511bb8a09250a4c5c6c288056b5f86b689e5225926e0b0f368b2298a6bc37748a7dffd4d05049b1768d7b8dc163b257ffc235738655581592346cd1886d2dcace06e2da9f063d04c687fe8adf4d34a58d535d60ff14dace074e38ec05c520750ec192564859d4d39ae461b629b33b861ac9ae49af277eb77f0c314f93edc12e2db33c26798c75d1e2083de1610f5bea2f07359bf0447c09ee3a8e9db231421177c2258de91f0b124a108c640def8f9c04dc055d2ec6612dd4af4d4a18eb7d897b69ed43f8f780de35e757cdf8473b14f5e98f0f7711e75bca2072fac08766bb4718b059e6567d8dfed5cf56f9a9e63cb8e995af5bbdb356387e6be429c54668996d069fa0ab4dbbf65ac55368eae877d272863420994775a900f7a72f283d30fd87b611e873f0d5e74fa19375a785bcda070776d3183e5aab0145b0c259480f21c832abbd30472e09d1a3373840e4c174cff24c45ff7b7bbb26835ad869e3873c61dde2dac86d2d47fa5d1d34d1aede55da5dd0677b563fc6db3380ffe24f119c3aacc12a02549c3893ef371f9d48a46bd8ae204c7d11f9425f0f096ab364730908529cc2e2fb73905c7ee6c807986bb71ee4dddd0893ffc8d04e570315d6b1c63308f5351e75ec08e8746693b3c5cb0c2d9d1ef2d38af55646e458f12c4bb00570cb0f5323be4eb8f5d00fcdaac3f629a0393d693de3513d03fc4f9a3325ed59d6025b79c392dc11ef5b61e50786f0e69442dd5a58dffcf6bbc164857c5678809f9a2d112e1eab38426fb14e64fc58e8c40fdc9a7d22b2a44f731c0e0da3fe4b5139eaf01f219f03984d6d7c041e8290ce1c68377393edd6dcde6999dcc749d33059fb714f4cd7e8e4a6da10d1d54c258e877050e5d7a3b86a9204d96c45385b54af2d21b02dcdcd4269f5e3b1394fd3d1ad33168318e6d0a56577a54d6816ab4db34e268a82d88140e9ee579f59f2c7676952b09db002c2c84984ace97ca72c49742d36b1db2ee32a86780a3f9cf17a757db81cb3d5f4f83a37075454e1f37e495416ab68a56cfd932746684d177ab83a0cbb53d02dac884793824110bc3bb84e2e235c75502e62ca670a3f2acf29ca5f343022daf1678b5e39734d6390015ad3d73bd5da3615e34e89baabc1914b610fae113ff989e9cbaa3c2f38b41f4470981ef532180a208773a66dc6f44a5ce7e00194a8a375591d6e7d7632c26db8f0976dbc14842e89479b304653815499bb59647995b9c5f5d8df8bd6034e02d3d4db9f70e340bbbff359fd08ac5f281f3f63cb82465f0bd9cf13f22b4f2cc15b18067d6b635eb121b773dd9db7890edce59e99f84ea1053efe059bc2583a269553a549431a1ecaf7fd20e57d565ac8d2818a1adba98df1a20a16aa855a5a50382b2737a8bb714f0d88e77157a49cf94ccb2d6aa194bd62e7cb0c9d92f9cdc120830bd6ce9d4e44bd08072e5c89d97b74599d2b0b2bf07418feb0226a2015db965dd354694e97c6f94fffc5cd26122e9d2ff7f2ca0f5fd08d5bc7a67ae7f77197bc2c1e0235fd4741df9cba0adafbab48e4aad68733166a482384c341a0ece2a433e93c7a583a7f864878d0627eb8b3534c3374c814f48025440900b5c3a9fad438568775a7b465fd374790da3affa6eb97e3b83aed06f3600f66750b154f5d7470794dbca167ff0f721d806e2f6eaf5229346eb4def64b88fe96dc76797ed3e10c3f990b489a79ed22a4dfab942d874c24db159929f2c182619024bfea9b93232731b83b8cd65abee4730c8e3793a92409d95a4e2bd35720b3ed5f16a40cb2a5997e7b902b1695e327b5fbf53153bf8887ed5d876c4e510685518cda450680a8bececa62bd071e574384282caabc06550bda8b711d248cbf33860719220706ade684", 0x1000, 0xfffffffffffffbff}, {&(0x7f0000003400)="c8fe722ad2c8e871d363aad089731e", 0xf, 0x6}], 0x400, &(0x7f0000003540)={[{@huge_never}, {@mode={'mode', 0x3d, 0x4}}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x67, 0x34]}}], [{@obj_role}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '.\x00'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) [ 1607.373647] loop2: detected capacity change from 0 to 16379 [ 1607.376748] loop3: detected capacity change from 0 to 40 [ 1607.380682] loop5: detected capacity change from 0 to 64 [ 1607.382812] tmpfs: Unsupported parameter 'huge' [ 1607.384872] loop1: detected capacity change from 0 to 40 [ 1607.393430] loop2: detected capacity change from 0 to 40 [ 1607.394747] loop7: detected capacity change from 0 to 40 22:30:59 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r1}) stat(&(0x7f0000001700)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0xa, 0x20, 0x80, 0x21, r1, r2}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xfffffffffffffffd, 0x38}, 0xafb, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x1}}, 0xe8) mount$9p_fd(0x0, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0), 0x21810d6, &(0x7f0000001900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX=0xee00, @ANYBLOB=',posixacl,fscache,aname={\\$\\+:^-,aname=,afid=0x0000000000000006,cache=none,cachetag=/dev/autofs\x00,fsname=/dev/autofs\x00,uid=', @ANYRESDEC=r2, @ANYBLOB=',context=user_u,fowner=', @ANYRESDEC, @ANYBLOB=',pcr=00000000000000000115,dont_appraise,func=KEXEC_INITRAMFS_CHECK,smackfsfloor={\\$\\+:^-,fowner=', @ANYRESDEC=0x0, @ANYBLOB="6aa5ffff000000000000b38516472800"]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000001340)=[{&(0x7f0000000240)="ef8880ef434e8161b16a53c26e8adbd35eb29ae38d3899b1787920ee6a0e27f3227854723acd75d5923f0c27ecfe7421bf26610e28b804d99b22b0aaf6b7318c3ce475dfc22fac2d17bab662f9fad97521f03303a99ab46a1a7e6eae121ed88c6506fc3880f9ea1ecd15860eeab867ac60145c760f7ddb997022a1c5440f2fc70208a2200e2bb37ba74ad4bf690eeae968564dbd40ce344835a0d713f7a2009c5b5858f77419479e2cff0186908cdfb9f4a1ee0e9785260e83fd393f58782f36c7493cf788388fdded6f59fc5c7577643d76904c4d7eee84a281fdc7db339c", 0xdf}, {&(0x7f0000000180)="df8809166d10c2763f65a5d78f2d81f3f426d759c75e27d90ade9040b347ba6e50f08f8c815c984c199338a3568ecd1146f0a808630b882a3a9b1c41f50f09ec8441908f04a2292491b9c34b5953424a25967b5b1d970538693b047ed28bbbda0e621748c15c3ed452c39163e9", 0x6d}, {&(0x7f0000000000)="23b238dca2c6f70f2099b22247089d0047", 0x11}, {&(0x7f00000000c0)="87d4ec7270ff5b59", 0x8}, {&(0x7f0000000340)="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", 0x1000}], 0x5, 0x3f, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r6 = openat(r4, &(0x7f00000016c0)='./file1\x00', 0x101542, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) openat(r0, &(0x7f00000013c0)='./file0\x00', 0x6001, 0x9) sendfile(r4, r3, 0x0, 0xfffffdef) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001400), 0x8400, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="80006200000000002e2f66696d65b479c638500986b613f0bb90e048833573d3daaff7b97bfd14f6813660cfa3ac5ebcc8d7d536d6174765fdc00073a262b797561a65528404829b2481000c9249f69346cf6ff8c93cfa4366fad6e9278c52bff8aa5a74db6dcd025996865037fbe470a0e624437d25b3e43bba70ca1544f8be7e397299420551f4a6"]) [ 1607.409208] loop0: detected capacity change from 0 to 40 22:30:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) faccessat(r1, &(0x7f0000000000)='./file1\x00', 0x41) dup(0xffffffffffffffff) [ 1607.459737] loop4: detected capacity change from 0 to 40 22:30:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x400402, 0x80) openat(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x40000, 0x5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0/file0\x00'}) [ 1607.515258] syz-executor.5: attempt to access beyond end of device [ 1607.515258] loop5: rw=2049, sector=64, nr_sectors = 4 limit=64 [ 1607.516156] Buffer I/O error on dev loop5, logical block 16, lost async page write [ 1607.528208] loop1: detected capacity change from 0 to 40 22:31:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r3}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0xa, 0x20, 0x80, 0x21, r3, r4}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xfffffffffffffffd, 0x38}, 0xafb, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x1}}, 0xe8) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xfffffffffffffff8, 0x7, &(0x7f0000001480)=[{&(0x7f00000000c0), 0x0, 0x4}, {&(0x7f0000000240)="b3319c269fe997f183380d8093242edd30f8cd188e3b71b82ec50d8f52cdae7be2f997005b27c44bf9dae5b2b4dc5e98d01e12bad387f3b3fe9b98b02ad2d69e5bbaf9eec12a8744beacdcf50f94908b16a0b3e998433377c932315493e8c378532f58e8132ed03077a536454f266bcfe2350dd80232d8a973efaea9286eed0a8286faf4327c428246e26d3214a7a5deabb51c", 0x93, 0x40}, {&(0x7f0000000300)="97dbbe1507dc8a1ff535a99786c01720b3d7b7cfa8d4950b9001c21ff922719c427d35f6af184606738058d168f61c42f10baa501230f5acea041aee7ea874d8652b1a48aba3e8ecb28802ea9dc4b6727dcd627e51c53aa228c15a3d0c01bd414bff97f67528e303de2f91eb6630df9e09954e52116ce4f073d25d600578b933c49d24e3a0daf3a250e5c3e760e22a0bc7995e88b5e2a082973ee0ff", 0x9c, 0xb0}, {&(0x7f00000003c0)="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", 0x1000, 0x200}, {&(0x7f0000000180)="e95ef0ad62941bebae88976249904fb0", 0x10, 0x91a9}, {&(0x7f00000001c0), 0x0, 0x8}, {&(0x7f00000013c0)="47c365ee6af6cd564afa835c6732ca1bed6605574c38fc10091425044c98b1a6c6a088ff6f3c16bf9dd5ebf11a5ed2cab809b55af44bf95f23ad1bdf52751a17d1d5bb6d4f6f812b0ec20c440b83e7b08e3955dd0f9623933d34fa7e8e84d9e4c06cce64a0554d19ea4812cc74cc1c44915ec921df9584c91896b85ccdab7cb24c3ddac0f101a8bc68e681", 0x8b, 0x8}], 0x1010, &(0x7f0000001540)={[{'('}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@smackfshat={'smackfshat', 0x3d, '$'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 22:31:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x169cc0, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) syncfs(r0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file2\x00', 0x80, 0x188) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40), 0x80000, 0x0) dup3(r3, r4, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r5, &(0x7f0000000140)="a3", 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x2400c810) [ 1619.466996] loop5: detected capacity change from 0 to 40 [ 1619.469389] loop1: detected capacity change from 0 to 40 setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x2, 0x4d4, [0x20000440, 0x0, 0x0, 0x200005c6, 0x200008e4], 0x0, &(0x7f00000001c0), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x4, 0xfbfb, 'veth0_to_hsr\x00', 'veth1_macvtap\x00', 'ipvlan0\x00', '\x00', @empty, [0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x126, 0x156, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x3c, 0x7, 0x2, 0x6}}}], [@common=@log={'log\x00', 0x28, {{0x0, "79de55fa75419953a7afc62c33974a6893703c3f4793cb2b8d263c489c44", 0x8}}}, @snat={'snat\x00', 0x10, {{@broadcast}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x11, 0x5, 0x3, 'macvlan1\x00', 'xfrm0\x00', 'netdevsim0\x00', 'veth0_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0xff], @random="f8cea726b33f", [0xff, 0x0, 0xff, 0x0, 0xff], 0x156, 0x2b6, 0x2ee, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'syzkaller0\x00', 'xfrm0\x00', 0x0, 0x2, 0x9, 0xfff80000, 0x3, 0x80000000, {}, {0xff}}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @private2, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [0xff000000, 0xff000000, 0xff], 0x4d, 0x1d, 0x8, 0x66, 0x4e21, 0x4e22, 0x4e22, 0x4e20}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x24}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:crond_unit_file_t:s0\x00'}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x54c) setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000180)=@v3={0x3000000, [{0x3d3, 0x133}, {0xfffffff7, 0x3}], r2}, 0x18, 0x3) 22:31:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r0, &(0x7f0000000140)="a3", 0x1) openat(r0, &(0x7f0000000000)='./file1\x00', 0x80, 0xa) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x8, 0x2) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:31:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) [ 1619.476419] loop7: detected capacity change from 0 to 40 [ 1619.479230] loop3: detected capacity change from 0 to 40 [ 1619.482163] loop2: detected capacity change from 0 to 40 [ 1619.496567] loop4: detected capacity change from 0 to 40 [ 1619.520313] syz-executor.5: attempt to access beyond end of device [ 1619.520313] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1619.521417] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1619.542633] syz-executor.5: attempt to access beyond end of device [ 1619.542633] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1619.543586] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1619.562657] loop0: detected capacity change from 0 to 40 22:31:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000240)="4ceff6eb8773795f469c9ac37378f5c5761d0a6031f486131b6bc9f34c409b00899c2e6fde81f600d63476bfe1461ec2af9830e7e088924b945fd70116abea840b063724b3edae4a81b217e701f1494de55acf025c13eb9ff51cb966ebbeb640862f64c58d82d39ecff43f491a36c08f28028a2f7beb4b8aacd2dc3b2d0413c3774534d3f6f0fdbce734b257b4839080be51a0aaa16ac0", 0x97}, {&(0x7f00000000c0)="933190d3edc5", 0x6}, {&(0x7f0000000180)="9d62808d77a59351b93c6bf3b4fc5eb67bbef759fc4537c18bae4c027f272550d1cc4f4b", 0x24}, {&(0x7f00000001c0)="3b92e04f1770cb2a80d980f256a176bc90576fea3bf30b9a5a5168def194aa88605a973b847231971ad0ec98969e5b60530730bcb0cdcf", 0x37}, {&(0x7f0000000300)="132c518a3c37739acf46379b322e2155550a24597c5c233ada3ab24bfca4c2061dc111591d2c25678c88c5c768387e6949b672b10bd1227a385e7f1933874404c8623c95b3d4072705b65c80e6cae061471fe779ee", 0x55}], 0x5, 0x9, 0x3) sendfile(0xffffffffffffffff, r1, &(0x7f0000000400)=0x300, 0x0) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:31:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r1, &(0x7f0000000000)=""/104, 0x68, 0x40, &(0x7f0000000180)=@in6={0xa, 0x4e21, 0x3ff, @empty, 0x653d}, 0x80) write(r0, &(0x7f0000000300)="8f", 0x1) [ 1619.676277] loop3: detected capacity change from 0 to 40 [ 1619.682400] loop7: detected capacity change from 0 to 40 [ 1619.689433] loop5: detected capacity change from 0 to 40 [ 1619.697449] loop4: detected capacity change from 0 to 40 22:31:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1619.722260] loop2: detected capacity change from 0 to 40 [ 1619.724496] syz-executor.5: attempt to access beyond end of device [ 1619.724496] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1619.725435] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1619.755737] loop0: detected capacity change from 0 to 40 22:31:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x0) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:11 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) r4 = openat(r3, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r6, r5, 0x0, 0xfffffdef) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r1, 0x0, 0xfffffdef) 22:31:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1619.811268] loop7: detected capacity change from 0 to 40 [ 1619.822705] loop3: detected capacity change from 0 to 40 [ 1619.823424] loop4: detected capacity change from 0 to 40 [ 1619.826219] loop5: detected capacity change from 0 to 40 [ 1619.852116] syz-executor.5: attempt to access beyond end of device [ 1619.852116] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1619.853012] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:31:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write(0xffffffffffffffff, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:31:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x440000) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x8, 0x0) fallocate(r0, 0x25, 0x3, 0xfff) unlinkat(r0, &(0x7f0000000240)='./file0/file0\x00', 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x4000, 0xd2) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) lseek(r3, 0x6, 0x3) 22:31:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x0) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1631.889338] loop1: detected capacity change from 0 to 40 22:31:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) openat(r2, &(0x7f0000000000)='./file0/file0\x00', 0xc0400, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1631.898356] loop5: detected capacity change from 0 to 40 [ 1631.909567] loop7: detected capacity change from 0 to 40 [ 1631.912155] loop0: detected capacity change from 0 to 40 [ 1631.940754] loop3: detected capacity change from 0 to 40 22:31:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x4b4b, &(0x7f0000000000)) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/xz_dec', 0x400000, 0x12) openat(r2, &(0x7f0000000180)='./file0\x00', 0x400701, 0x100) [ 1631.951251] syz-executor.5: attempt to access beyond end of device [ 1631.951251] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1631.952354] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1631.954347] loop4: detected capacity change from 0 to 40 22:31:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1632.009635] loop1: detected capacity change from 0 to 40 22:31:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2, 0x76bd}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1632.061143] loop7: detected capacity change from 0 to 40 [ 1632.063402] loop0: detected capacity change from 0 to 40 [ 1632.068462] loop5: detected capacity change from 0 to 40 [ 1632.099144] syz-executor.5: attempt to access beyond end of device [ 1632.099144] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1632.100036] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:31:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x0) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1632.180251] loop4: detected capacity change from 0 to 40 [ 1632.193252] loop3: detected capacity change from 0 to 40 22:31:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xfffffdf2) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) 22:31:35 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = getgid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000007dc0)={0x4, &(0x7f0000007d80)=[{0x6, 0x7, 0x80, 0xe3}, {0x9, 0x3f, 0x3f}, {0x3, 0x7, 0x9, 0x9}, {0x5, 0x3e, 0x3, 0x3}]}) r4 = accept4(r1, &(0x7f0000007e00)=@nl, &(0x7f0000007e80)=0x80, 0x81000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000007ec0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000007f00), 0x400000, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000007f40)='ns/uts\x00') r8 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = getpid() pidfd_open(r9, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000007f80)={0x0, 0x0}, &(0x7f0000007fc0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000008000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r12, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000008080)={0x0, 0x0}) [ 1643.569089] loop5: detected capacity change from 0 to 40 [ 1643.572760] loop7: detected capacity change from 0 to 40 [ 1643.586065] loop1: detected capacity change from 0 to 40 [ 1643.589746] loop3: detected capacity change from 0 to 40 [ 1643.595379] cgroup2: Unknown parameter 'smackfsdef' sendmmsg$unix(r1, &(0x7f0000008340)=[{{&(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000000c0)}, {&(0x7f0000000180)}, {&(0x7f0000000340)="90db50c17e843dba444eede8dc081f023f85e9f71564d9d4b566407f29fe8b05f9d5ff8c66fde11561bb3c5b6c7f5cbffdbedf6f5677b5a307891a503a0715df7682b5090201f1a5d940065cc7cf3ebf896f9979b6e800e2adfc897de95bc1c7165b17ad80929eb43e74bfdd9e35ab56aa274f21304ffe6a8f3fe3ae9fce823eaa4007f06f585967a1035dccae0698a67ef0c4a7d2de74b5b378665dd26068b59db140f1603220b38e8ad68a040b88b634e47f3a775d19b61a938636e87d725dcbabefaecbbd7825c88d12738d1e72ab711bbcd62472e7095e378c6e3a6ab6e4497f390c7d920fd45316df3991f7e31a718a0fddfa113e38f28f780e00bd8355db472ea609fd28093e49585350cadfa1624686a8a2b8180688ce74d29aadc810f0bca5622007d1b968189ef7fed613a81560bbd09fde3253d2dd5c03e473b8abf3176c9804120b42c6263329781a4ae694043775f7e1288f7d421248beb9f3f4b8efebe2228fc6f4f7fd6f851f177a3c43d954db6148fa1ad5171d053ac420d7d75348d5e0b563ff42d80703edb87db37637469cf9eddd3e7d9bd2817f28cca4b48e741e388bfdc0a2133cd9dd2cdc77371dec8052070b3f541b2c4847b5dd15b022f310cb3acd6045854ff59942733cdc41bafaf3770ea3af63617fa6d3ef52bc217c98da3f963b0b6a3c1a84f06f3882590c201d64adf1f1e0a40f949763a70dff54cbf46138c887c717369655c3d806c994aa0dc1b94e676a9061bc8e64b79c20fb52692529233a00eb15f8982fc5d1cbf4867d2ee6f4a7683f29043ca6d303ea233f644880f891ad8467d97e70b82a0635ce1c222d874242d51ede0f3edbc1e5c6b6f9349b6cdd6b2aef50debc337aa1e60047fb637c5a387d9984aa1c73114265bbd9435e5cd611738a8496841e96b6c39f4d96586a885d29420b0397f3362b40499eeb93b77f83f89950bee755134e072a06396eaabd2c9125349ff3f2d34fcb6c13f0bc49b314f8cb7df30b873dff43235fc9a55d9f2933efc31c811e7ce33129524ddeb0a70c2f0f853e796e4381c84f764ef549b372c80e7aeca50ceac24b6c533e173b7cc76aa81b1d4d988b8d3acc290d18525c0efd00b308b28e83f577606885e682dc79de1d7f2e3ad6d359f71fc4512f885bc66e257faf7d78450ad771198d03390a87a1d120e857175d12c71d51a28172870abc84255dd34c0058ad3fcb452c6bd09a9626e9bdb0a121488d696e123b243b513ec59c19eeacef2003070818b4cc94f92f7b6f975332d3cd13049a0c963139321558fe3c427735034ec8b158d81e90bc86a25c55e92bf86ea1372ac67b11f992ccb65344b29f44fe3029b9cd2d65a82db2b03caedc37cb282b2cb50e0b9261d11a338f9dcbe2db85d524d8c3c8e735a62c21a740d0f755c37f2b17308b5c4c798dae3851e22efcb79f01da730e985def4ca53b5664dd29d7439d735e7d6c56a80fb25df832fdba7e9d0507f66d5dd8ac03974327448ed03def6bd7772995e53df884f16f81f7f74ff1d15f5b8c3bf297e1f216eee8ffd2512af5d5c67ff41aaf963668848f6417b2ddbc7f896b083a9f4052d9e935d9159502ba00859494d661fc52b44e744dc21d9af78e983575242667375dccdfbf78e3a68136ef0c5c34d42233b8156a561cf70c774d1a0428debd9aefd66ef56c7e6bd16bebdfdf1a6166da64b19b30ab11bf249b6cc633587c23821d940f772c402bff77251c49889e25c6365b5922ee7a31e40570146ae1a4d45b9eca13bc61999f2522ba312d51445fe837243f340623950c1d17aae70ae04413de6c1fa7f57c04e1a63b481eccc4ee1481452e49372df544578e2fa730804f748ca569806ffdfea2fdcfac530c860b9bc6b3c445c072026742b8b628d1a2154d7ec26bddc478c09e681f55a540adbba65cdfbbfbd3c21dbe7d33ed02fbbc8457b153b51d1af1527e06c997dbc817379ff45a8b78b9cf8cf56b40e608700db47f7b81ef2448a6b93d5f48be20903c934ce6e6db4525c94f54c00f392917e3d6a5431b0f2dc768e4145d1ace8d8c329b41bf4ca9bbf6c42bab9db1174ab0b5f88dc421623c52f39e2893aea7ea6eaabbe81e3683bb664d4432088fdae9dd82cea135cdae8cf6bb8d367e110745a413b92d5adb0d8bf164e867d67b9250be0dcb01458d0e6b2c74c5cd37e392bce09dacfb66221fbfebf4ac2e9a7369aec6f9769f512f2266145f5922fa6699c208019a83032a704b5bf5d2227bc0979489b3b32d430683bc9b83f12d7f724412744b30c385d0a499da7b18c279dc2eed022ffa60e1b2439925aa06bb31dcb15959a4cc36b5aa85b3d7998f5786fd37f5b3741acfe31b9f1a48f6bff8cce36a7cedae063970eb02e61b98988b9dbad5f913281d8662d5cedb1776f4452a878e2e43c67a0d0ec8ab73457945a094e786d7c72b72ee1ba88283d08bc7e6ab2245ac2111b14a421296affe6f8e96b72be31d0e9511f246eb1542334af3c668f79b361eb1a401594b3705a9edc805839816302461aea903c8d17a0a5d365452b55aadb125e82fb3e0beb97cec996039fd17eb38041fc990759a4c0017f32453b7bcf14decc0adfbab5210e046435e920ed07b66dd5d394d17e6d2e5fa1af5dcaceee9d9e89bea52833b8ae030900f452a5a4ff3b95e0e30a5779a16df5dbefdc2fafbb2f1447ba610fc7bc71aee5e496184e1daa81858dc1e2af5b1d63b8c263350447cbf10e083a8615f8d4a5e02b0830b3b1e03fc85fbdcc9c65edc3700abf25f15a7cece79651ed0a19d35357278178a89ebc81e2b60c4e5c56597f84c6a2cc34feeffcb6649a7203b535d803327922ab5b9d6902dcb3137de55b8adedde764b7459a1e2f8d821303a0c839fb4d5a221b31af457e81d6879ff6d8e0226205226a362bfa36df5ad83c73f3608d3056a000b62a9b2ad51151d10ad1b152c0ee1e78595f4ed3eff133001994449fcb32ea09a741b8df57aaa3848cc6d7cc2709a53758f1f0ab7155ba3d837ce62f1706ffcacf7a4eae07860ee68ffa6fdc7f3d8e63bec9fb4c4314f64638ec20df7326670c1f4299196abc87611da203ce8c4e3238ce3742b1b834d6a86ea83f9b74cbec8daf730ed54e70764fde37f78dd75f4957f864ec68255a076a442769eb0dcd9e06245a12fb02ca9b8f54ca4f0664e2970e32eb7ffd4d5e677bd5ff4ef7e4aa12177c308ceae82e8c1693113554d16910f1864bf0f0118cd175376ed434aa8b46f5f9c762745cda7fc48b101c8c93b63d16479940265b0c8dcbe78b32f960da62aeeced5adbf1677315452071cb4f64a16221c13f4f4bfe7c41c803cb1cd57f2fff51ba6e633291556644b8d0bb2f34f65be4b191de740b2afe1369473005b87ca77d73dc90e80e7d5ad356d22b4a7cb1caed2e0d49dc1361a6b54980637c40ac31f3f0b684439cb9c647a82e760aeef58beadb4d68d41fdd956571e7fcff6955e896a41ae79336a1f50800579d5633aa8a1c2931b3fd72291452d738ebd07cf438838e55df627cd3b8c839f359b72d7d59254891cd6c028247f103a023ac8d20b4a8b4610dbf300db28939a8016b29be59e37d4e95156e4474fb3901506d021cd2e1b60440bdde294762fadeeee3c07c9172e6bef8d639e499a7de67341e1c5edbc2c98c06229958e425671009ac2d1f619ed9a3cf66637b384b1d33a44462000d0f8ad40c026f6c61ad42d299043a3675897fd9ebf555a5062e7ea41e05514027fb3a3013a50bab11d7038bb9352812a2d377babbebc04ae14e33e41281fa8d67e58848d25b2de47c88669c41519ac9058132d4968586acc35a9c47e9a8e4f89ccd93baa50387946a5c4d3e0ef694a0aeea975f9c3d5d642561ee3f7e94560e79f46ad7493a0c68a90eb2b3a8295ee0a3028eda98f468c30ca4f90976702e398c9bbe620c89e3739ffa04c23c61dec5fefbfb76293285d86c6ac8c51cdd57a75ddce2429d058bbe22ace2c6e8afa66a1547de2e29aab5386d6edcd5ecac81c6a0fb95d1b1b361c94953e6e4dc26b52a91b742b6c9649a152ed3746f04a3be448ba22bc49bfdf28a0e597072051d65639658f08ae598e3d4a3d081877d244b30303cfbe426c6651a20263b0b47d4426797c14b508b2032d792ad0a0cec93a7d6ff903e43ac136ed59011c00f2377235caf3924c794d0d77fbc70438371c0818a2abfffa60737eaecf18c2b47672e9f40ed5e5f622eb02e85b7c3a38d33b7633c1e12b728379abaa8478c441979eb4610eb9801a4b35c9ba31df29f263ff8d580d4a3b9132e35be2f1aa4d36f145575ba1467e917361c5788e911d1f1c1a5c7c75ca306e3095fe47ae07cc2662b5077d1c3870e96301f3ea010f9e5ce975593eefda39dad80a67e7e009762269d0a19daebe99d633db445a9ba4d041a81694779d346284075f9625cae688b75da2e521827f8e0b0da0a426775475ad0df173a38454c5d4138c3b22b479ebf607b4d90eca316ebe4ba60bafec20e8d7f2954331e3a515d4183248926fcf9bd03a909a31965d933fdba0f8e9720bd4564439587305c3a0d30c9f44d491cff52ec87ac06f7139a89eb9b5cdce10b6030495cc87ec73c178e73172a5b405ccb4f5cc26bda160f85cd631407e59bf67b70669b7478be0663e0d40fd141083b849ee087dac1db1207785f98a4e28179a6eccd08095e0287a8128e2acdb0b1d5364fe0e8565666a1f3f2932066c419ecdeac30fa715ee1d62e5e47c04c77d7bed3bd9df7f63646e17c7e36a1f9697b12f9a0d8a6bb43a676aa4b99ed2127d593bf1f407c602f4665cebc41830bd1dec7773da85321c5aff51a4b8dc665b86514580e337085714f80137a86fbfe0c2f9a1464ac0cfd0431d838e89da82c29f452a8f36995de7ec4c57d1816b61d39b80a6168b1a7675e3ebb819dcffbac899cf0a12f5a81a8f92d895cb4f2c9bdd8e119ae86c000d2dc37340f8eb0a200770d07467b782d9f3006988768199359f1eded56c83be07a32d9a63dd9698682dd75bdb68a93ddcec117e72b2b75a4d750fd888f0800a10954ec9b01bd8f877381d40da4fe53eba74a3b50e71a414e5943788578b383a85b826489692c3a3ddb0f0b9620f8261c40924a79d7d301a46bff95ca4df9fd86dd871afaaa8fac7c5018742fe668b53e1c75680e6fc171b634aa10e775b0d0e644278be97ca1c5a16776c24b89dd6908cb03992703a08b9cf505d96f0a26a59914747ee32dc0fb2d6a6c0cb70c4af1b626d7f01b65ac2651edc5e43156b384c2ed58521aedbd8e101869d81095e732e0098f7627ac4277ca4e13fed44b720e61bbe14e69e6adfdb68be9107fd90ef21da1bf8f5e2ff449115cff390b94c594dc60bd6a67e5d8fb3e2c70fee79a6a61459383a8a2ea3b9369052a0e22f32ade39650f2d51f45bf579e2207dfcdb7b8facb800788724ed48dc64549d443dfe5b1c5a7e8642ef5a216b99a99043d4d585ff827191fa56cc4032136705871687939a94fe98ae6abbe2e2f5742b1a692e81c858b8a92272fa28415ed1922b0ca360ce8c2efd0020edfc4f76f68f47376699273cbad97fec1fd22c75716390e7bac7ea57bcd9b7855b70c804dcb4ad2c981eabdf5b55fb516462e496e58ef667d4f1bcf9cd5eaa66ff895789c369a350973fe4e223be10d73f4089f1f7214f5e3e3a54b5a97480732a08dd82b33846e28ee283e2fb7161d46da9ebb2ab8334e4751bff11e397c836cd9c653b5151e20efe5b735b2572d7700c8f0867d48b60405", 0x1000}, {&(0x7f0000000240)="3c23f3a30ba374fe2a21aaf425dac872282988a06f725b342c34a1c73ab8c6288ff347815d59f4953616be3bfb61bfa4c61070dbaf8fd7b6d8786f70c00c5f0325c27dfd3b042c31f8914cc01aa65526bacd5b3d9d050ca33e2fcba2269df9b2d3543aad002719bd332df3719609f1818c77fd41a623c5582ef8c080acb1ef4b9a13432ac165dad3b7", 0x89}, {&(0x7f0000001340)="91dd7087c9226b19a86ffecb7aaa702a71a2eec22ea55f08b0dd0c30d0b15655f2d031e2251dbbe6be8b5be019abaef54218d841c6e1d3ac2ace0b800b432bb1cb73705684ed07830f", 0x49}, {&(0x7f00000013c0)="35c12326d9817f6f861deaf32df9b0457cf628f7fd62b32d7120f0d646d1f8a3b1f92a8a583c148cbad4060950e1ca7724ff51147834c0b4809f9db8ca8847563e186661140cf686870fc7f37f4ada19c6343131b75b92e12184d647c5ee6fc488c7cf0a954927ca7b6c8fcd6b63719fc5c6f21516d465973daff121b772957ed1dac17f6dfd3da6188feda1fdf5a42eab1dfc825a216979b95cc689818dee5f070871d35748cf9969f1a6f3e4bddd5ff233350ed80ba91765bab8afeec48610441082e2c2ca86c071540916d7d79e550d2c5002128d27794cc1cd8faa34", 0xde}, {&(0x7f00000014c0)="f262218cfeb9f3d1f620cac58282cb480e1f255fd58ca3ee5edf94a94d9563974552a65e4919eb2320655c3b1b6cbdaa8093eca8c33f7525e5d300395c421f9d6b5ca547193250025b", 0x49}], 0x7, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}], 0x88, 0x4000}}, {{&(0x7f0000002b80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000002c00)="a5332f1703c64bc03381cfe6f509d93745bd3351398cd4d888b2b40459c1d34831d7fce7", 0x24}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="6a0cd11817fb8742c49dd3a23577115c10f1a903c3dd14ef130e2d36de873e2c41e5525f8b67570fbcd44a1196b7a1c6adfc0bb32a1248a773d3ca933bd7c78640a9aa10244b373269364119120ee4b3439667fa2671213fb76f00d8b27f30dab846ccc9c06ab0b53f47e264b70218da2076d0d595e553a8236c03f6abef654b47b8c620e633dd02ac6e50319a03f873d1a9e6ca99a0b18afd1af01f8a1cf8d6c46a5f0bb5851d894ddcab1bc2449c4d42a433b35e616b10651df321bba3e866d068c1fbff2bb71f5bcdd5298138e32a928f53c66379a22549c01666c331582672b224bbc8c68ba703a5ebcc5bc5c6de", 0xf0}, {&(0x7f0000003d40)="b69844d35654c4eed12960db50d05a94b09c84df5f3a9ac988d73f251fd5f294c576d008822d21e1b301c978fd6c6a9270805d8be37bffb8fc1ce97e2c66632633d922adfd05996d8d71b5db0707f034a9cc52a6451261e7bea7e989c6609e0f3b7416f2827df0c6c3c1f3306fbb09efbd25d1ba2e94bcc8f709fb55175e5f5cce69f7d502a46898c31a5d707b113805df75bcfbf0ae75b2143a7b1e27c58f16776efb057a49d8a423b2dc5122162e6af5d3e1d92a86ea7780f3726fab5cb3b5256937495462da76c16e0c36aeccbaa161238071207b8c512dd83622d362773cc4eb47d05102742c8e78285593dfa3", 0xef}], 0x4, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000003e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003f00)="4a6626b7fd6904d306824db743101476c45bea5df5f15b2e8c9364fc2d121c0e9a6a677eb00a977aa7959727269c6ed87e82", 0x32}, {&(0x7f0000003f40)="ab2f3137dde18a8adbc11c8833752b5dc71e81ead677f38009f8803f6aec9eef035164c54d6af94b386828fa6f82d9f4d232b62636fb58b61f5092fc3ad34f4160650db39b39c1ce3cc2f2a77e482796fcb1bfe736c10691d7ef792e7bbc241e781ceb2ff2bd646ec47908edec02015ed06f9f3ac2a62d6eb18af1b731978f94b97d299067f421909a86c32900244d27f1297c768f1aec899b453f2dc3", 0x9d}], 0x2, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xb8, 0x8040}}, {{&(0x7f0000004180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000004200)="5a022a0af9b76a599afd244deb692b093c8ccb07e15d3dceb80f967dc1db9fdba894cf4f126673d1315208e181a20ac223394f8a45f7598ccf469f5c91a1c1b05f332657b69452899854c6f1d1c668ab15092df42158c6cff17d87403f5d02d14dd25d2f531a68ba1cefafa0d3", 0x6d}, {&(0x7f0000004280)="2adb813577dc82339e25cb40155d983fe255550a9dea519637d608631e576ecaa2c89959403cde0af8d5aed5aac0cfd9e98c0e7926207c578e293168314bcd2ee6b9471c91cc5388609998f48a45d4e65769caa272e94d649f955349c2a130f5120f4ae927b1dde8cba916c99cc517e983c12ee95d30c1e778acfbb10c3ba5a14ee6e4be4615fca5c146336bb194089c5a99253a0431aefe2df731a500071dea58b465c3d1b9d371b2174536a39a8a90c65fbf21df945c01ddd8244ea4ff78d3c78892966a647697dc748bafd0fb416ae3", 0xd1}, {&(0x7f0000004380)="1bd9982633847fed3dd053d66b5ff47e2011393252598ac33e59e9a664c039632c2ba2cf05c2ea7b573304719df744", 0x2f}, {&(0x7f00000043c0)="21f57f08d000e497293c", 0xa}], 0x4, &(0x7f0000004a80)=[@cred={{0x1c}}], 0x20, 0x4000001}}, {{&(0x7f0000004ac0)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000004b40)="3eae52a85a712f5b7cdf5aa6d4d3221e13ccd2c010d047631baa1ecbb965d4136194b8fa2dc43e4e4dfc1173102c7516a2e8e5e78c01190ef60f94548d98e32c", 0x40}, {&(0x7f0000004b80)="f46734acc340e8ce9a3d03e4d4e2860c6a1de75db09fdcb21ae8a3c7294c6c9e66f31406851d49cb629beb34963f89231ac2a14f8d99d0b508e542c1ab6058615a089d699f664a33633d6e3d81ea0d0d10fc0448a51fc5ee8902c7e2eac61a1e6563603435cfef2161489b0bd2826f0e5646179d784902aaf9cda8ebb8d9db439a53873c59c527acfa9e4e97374c19c08bbdced45de0eddba8fc849742aa", 0x9e}, {0xfffffffffffffffe}, {&(0x7f0000004c40)}, {&(0x7f0000004c80)="7df75732103f0b6778d87044e7203e3d7983694cf3a220b3b7fec79b3258b52544c3376327171615624d51a9b5edce5363eef57a478e3245556b9ecba3f39b07f14a3df8cbd4bbda8476ea075fdd9223a991461d3ee95b5955aba40de016aa3880084523290dbc3380", 0x69}, {&(0x7f0000004d00)="e98983a0311b9dc444cac550349dc5488834b80f1ad87028c5dc85a09a13950622536336d62c578377f130f7738d11b15ee59a0ae965ebabf398db347009e53792d49a14bcc1a8503b179b76f6b34a25bc41a93b84d8bbb481f86d21ababcf9c667b1a98b6704c5374ed3362a765da552cb8272ffb98db20f3af5b168361d2f4348c6055545d9cec392bd1e2bffe9673eaa43ab7d9c51d63a3a901e58e2c58e6bb2dd6ff3e5206b674ec1fcfa708feaef1283846ab5fe269214f5e0aa5692cfa84e2449cf466a587480a55cf3e0dec294bf88ca8b7a8d1bf15bda28f7f26c256d16e6b96e00491193977dedc2e0e1273", 0xf0}], 0x6, &(0x7f0000005580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee01}}}], 0x128, 0x44000}}, {{&(0x7f00000056c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000006a80)=[{&(0x7f0000005740)="770de8198643a99e92f6d68a000be65b0634d7337afb772e546d75bcd8737512a280aacc3a7d9a8bb0d48cb35b466e27d9cafd5d2ffa13fc0bd7a8d0223c8a578722959e22182290d90dd150dc1df6d0c93f100c566d1a30e2d11e48026b9e8e0f5534367ae690b08622852b223363875656cf017e477dd1c5b350f03e09902f0d89733ca8eaa85d4a4417f99d0445db4cbc91c6ae5a048457cd32c5bb44f87a978a76", 0xa3}, {&(0x7f0000005800)="da69ff505c77e8e388e05fab7688ff72600f7337be39d40dd76245a474cff63fb18f0425f33d8410b3a6a4e10d1998b310327edfa692a46b3c96483260706bfc8e0d89aeb1f442cc6e50cae55873d340e03bfdee074627d9ced2a74bc4dba0a9a77b05", 0x63}, {&(0x7f0000005880)="387bf2cd96e65ddadf2d0d6d8c699dfcbaed6b77ed0b22213d7a5aee183e8c47ae016815de39bccde1bd3acbb8c9069fd10318f8a638bd9efb2095e8a5d33fdfd84615", 0x43}, {&(0x7f0000005900)="c4685a76fa420dee9fc75ec482e86c9cb45639e03499c6e8f7da0a060b5942eeb3d2dde9013bd1f28b05c0e98255ed5a94985c0dca4024ab2b29c59b827e39003c144f585b0ecfdbf3797aaf5cbb74a52281a10956b8457bd1e6ee52517001917690af5b81a373f150b4f270430fc1ebd179a24516b76b6831a508baca092f0783f3678379ecdf39f445217e69ea41bb9d0873292233e076ff121dda8b01e25870134d8e4551281f2bf89e6e218da2cec3cc920e54e3fa069abc8f2123f468f55a1d5df847", 0xc5}, {&(0x7f0000005a00)="b02dbd20dad56d90a98a66a4826f716afb8288fa1be406ec94a92d433afd59841709be07242d8405007f8a0c201f329ae8d1cfcb9baa27cfa198ff864c8f3870101f9a05e98c072bdf4aab04158c39e4799fd2441f", 0x55}, {&(0x7f0000005a80)="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", 0x1000}], 0x6, &(0x7f0000008100)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r2}}}, @rights={{0x2c, 0x1, 0x1, [r3, r1, r4, r5, r6, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee01}}}], 0x130, 0x40}}, {{0x0, 0x0, &(0x7f00000082c0)=[{&(0x7f0000008240)="7273544cd6c18c11ee71e3704797bc1ff8c9d9c9ac9e8402d36fd68d673a3a2f9b70162809271f22b2709154659e4e7f249f804a0caa07a2f619afb772e63c90cac3592d46ea0f354d8544baaf85", 0x4e}], 0x1, &(0x7f0000008300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x20040080}}], 0x7, 0x4) write(r1, &(0x7f0000000300)="8f", 0x1) 22:31:35 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x7ff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0400000064ffffffff0000000001010039a4002000f801", 0x17}, {0x0, 0x0, 0x7}], 0x41000, &(0x7f0000000140)=ANY=[]) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) mount$cgroup2(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x10006, &(0x7f0000000580)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, 'fowner'}}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x2f}}, {@uid_lt={'uid<', r2}}, {@dont_measure}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, 'uid>'}}]}) chroot(&(0x7f00000003c0)='./file1\x00') open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) write(r1, &(0x7f0000000300)="8f", 0x1) openat(r0, &(0x7f0000000340)='./file0\x00', 0x8400, 0x116) 22:31:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x21, r4, r5}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xf720, 0x38}, 0xafb, 0x86e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x9}}, 0xe8) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001240)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/46, 0x2e}, {&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/39, 0x27}], 0xa, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/198, 0xc6}, {&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000ac0)=""/192, 0xc0}, {&(0x7f0000000b80)=""/237, 0xed}, {&(0x7f0000000c80)=""/216, 0xd8}, {&(0x7f0000000d80)=""/47, 0x2f}, {&(0x7f0000000dc0)=""/202, 0xca}], 0x7, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000001140)=""/68, 0x44}], 0x2, &(0x7f0000001200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x3, 0x0, &(0x7f0000001340)={r6, r7+10000000}) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2400, &(0x7f0000001380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@access_any}, {@access_any}], [{@audit}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r8}}, {@dont_measure}, {@measure}, {@audit}]}}) dup(0xffffffffffffffff) [ 1643.603581] loop0: detected capacity change from 0 to 40 [ 1643.609504] loop2: detected capacity change from 0 to 40 [ 1643.633165] cgroup2: Unknown parameter 'smackfsdef' 22:31:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1643.657281] loop4: detected capacity change from 0 to 40 22:31:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/virtio_gpu', 0x139d01, 0x108) write(r1, &(0x7f0000000140)="a3", 0x1) openat(r1, &(0x7f0000000000)='./file0\x00', 0x20040, 0x2) 22:31:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r3}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0xa, 0x20, 0x80, 0x21, r3, r4}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xfffffffffffffffd, 0x38}, 0xafb, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x1}}, 0xe8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x7, &(0x7f0000000640)=[{&(0x7f0000000240)="c7d1c6e95c6a89d6ddce9590700d038e15a75b6de693c858dd0b9bff9ff18ce0f7d12543dc1de461c2d4bced1f45bc2342cb71e01f5528d2de9d9ea076ea3875f4bdfeae2bc6fa949bff974e82ea2df4d5a71181a67ab52520940864373f99ef0cf32f9a3238cd444659f6a57a7a6365a3c56cb8119682df329ccefe55220b3d51f7e73da3501bbeb32d", 0x8a, 0x9}, {&(0x7f0000000340)="ac660b2c59cee7d9dd7367e6998d303bc0366bd0cd00e54e757b8222a85464517182df7bcfa6593368ab54d2babdc4e093f8f0bb1a97127e15890e62dff9f19002d5addf471a08ef2d12443e830c1cd95f4d8a9da9708d223b5a5c14f5a19598e388860377a678a9cbf774af8647e7a35b6e3811100ef64e213f75010fee2e5756f547899d85579b9b31e088d455d74fe5287e21f321907c3841a0e296b157a98f292e8dd602c0f8cc292e81614c7214ba1c0c9e1d30b0e3796a4ef7c03a87a5", 0xc0, 0x8}, {&(0x7f0000000180)="da7f4c3a8c88463e0b666b16993f11d12228921e474f87574b812a7bab5b83116e2ae7158d10d9702127204095e7b7302f36428a78e4d28f98e2633c7d3a36afa999b85e88c686bb44290b1a29812a1e9bdec9a4ae22dcfc107472b6997d0fb9f37db071e2cca47c2e88636e87e7ba45d78070801a976b4d0d", 0x79, 0x1}, {&(0x7f00000000c0)="ea566ab837f4aa4816b7b4a96cf390abdee77294191d00436007b5ce8cd2a650", 0x20}, {&(0x7f0000000400)="23014abd295d2bd0628dff4375fde53f77b4ecf4fc737c05f3b1c188180636fe1132358b500c9d355831e6a0c75c48efd1341892888a7299b37898644d7f5e943c98c5d4e423c6ca0dc5a40183f56fd77b4104dec1e5f755715aaccecc8ca04a02596b524178b16a1f48700fbd4790175be566d451aa6297eeddbd28320fd32f7f2970c507988fbd45e52b17075a49331c3b92074095bdb996ceced6b975b059c64d96908e0277cfd1ae40e83a49b5bb5c6256aab195dfa74ab2a44200e44712e8f0400fa4ef66c25513e9222aec463248429b4175050ac7ece2a67ec5a225d4bd44f51ff8e4fc68864dcb57ecff3a736af57cc2e0033adb698851", 0xfb, 0x4}, {&(0x7f0000000500)="977386", 0x3, 0x3ff}, {&(0x7f0000000540)="186d4c95832938f8038404cb3953152fbba91f0baddcb0160a8e83093ad0ebf7ff288e1407e36a9827a52585442bdf4a6864c93181a23032faffbbefd3f5784321f32d1f214bd75bc93f74d8bd18b0093c567ad7b03defd2f3eda4939a21d0db7acfa2584fb2dcdffd0806ba7a5097919d6767400de5f645cbf314261f5e0bc9c12bd90f539f52de9a50b5120f5a9969a7bb48d7589fa65dc56e9c0f381cce79af37fe3033a5b92344f1aa51fb7b74c390f3c6c3ce6c44f1a6b1c97345c289506b9f5d6a1abbba0072773180fafeaf3bc6b6546f62dbd65cbc3af7222430f6aa75b56d9fa8319d321aac11", 0xeb, 0x2}], 0x2010002, &(0x7f0000000700)={[{@shortname_win95}, {@numtail}], [{@audit}, {@fowner_lt={'fowner<', r4}}, {@smackfsdef={'smackfsdef', 0x3d, '#'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) [ 1643.723237] loop7: detected capacity change from 0 to 40 22:31:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1643.769642] loop3: detected capacity change from 0 to 40 [ 1643.772257] loop1: detected capacity change from 0 to 40 22:31:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1643.817303] loop0: detected capacity change from 0 to 40 22:31:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:35 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat(r1, &(0x7f00000001c0)='./file1\x00', 0x103000, 0x0) write(r2, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) chdir(&(0x7f0000000000)='./file1\x00') fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)={'L+', 0xec8}, 0x16, 0x2) [ 1643.913466] loop4: detected capacity change from 0 to 40 [ 1643.955427] loop7: detected capacity change from 0 to 40 [ 1643.972243] loop1: detected capacity change from 0 to 40 22:31:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) r2 = memfd_secret(0x80000) r3 = getpid() pidfd_open(r3, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000000c0)={0x2, 0x4, 0x3, 0x1000, r3}) 22:31:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) renameat2(r0, &(0x7f0000000380)='./file1\x00', r1, &(0x7f00000003c0)='./file1\x00', 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x20101) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200000, 0x41) openat(r3, &(0x7f0000000040)='./file0\x00', 0x2101, 0x1) mknodat$loop(r2, &(0x7f00000001c0)='./file1\x00', 0x1000, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x808000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans==', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',mmap,access=any,aname=,cachetag=/dev/vcsa#\x00,access=client,fowner<', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) write(r2, &(0x7f0000000300)="8f", 0x1) 22:31:51 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) fallocate(r0, 0x4, 0x3ff, 0x200) sendfile(r2, r1, 0x0, 0xfffffdef) 22:31:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:51 executing program 1: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:31:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1658.965326] loop5: detected capacity change from 0 to 40 [ 1658.972452] loop3: detected capacity change from 0 to 40 [ 1658.976531] loop4: detected capacity change from 0 to 40 [ 1658.977679] loop7: detected capacity change from 0 to 40 [ 1658.994221] loop2: detected capacity change from 0 to 40 22:31:51 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file1', [{0x20, ','}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}], 0xa, "c4998221628b5e73aec527b0e702a7ef5c36d0d6a9367ff3813f9746e2fcf2321bbfe2fe5818a80e30bff295483c482ccbd79139d3f98fa58fefbc639d6477cf1a4c2e7deda4b522d7680ca0751be5ea428fef5b8ae1d86e11926678cb97b33a78d3194d80f36a26d64a83853feb8319d9f1b7b0b7ddf543da6188882806212c8be8d0604f188eb29ce47074f2390061ad926e7fc4440d06f7142e698bfecac894bb2f2ecf5807d59389c682a50e16dcbb761f9557237b4356baa257ac7eeb559446bf6886595312df277299938d426ef56cfb8e8394"}, 0xf5) write(r1, &(0x7f0000000300)="8f", 0x1) r3 = dup(r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r4, &(0x7f0000000140)="a3", 0x1) mknodat$loop(r4, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r5 = openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x400000, 0x22) move_mount(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./file1\x00', 0x2) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x400, 0x40) [ 1659.026749] loop0: detected capacity change from 0 to 40 [ 1659.032141] syz-executor.5: attempt to access beyond end of device [ 1659.032141] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1659.033297] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1659.059122] syz-executor.5: attempt to access beyond end of device [ 1659.059122] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1659.060242] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:31:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:51 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind(r1, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x6be0, @mcast1, 0x8, 0x2}, 0x80) write(r0, &(0x7f0000000300)="8f", 0x1) [ 1659.103229] loop1: detected capacity change from 0 to 40 22:31:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0xa0800, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x220) sendfile(r4, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1659.201492] loop4: detected capacity change from 0 to 40 22:31:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x101042, 0x140) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040)=0x3f, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r3, &(0x7f0000000180)="f86b34ec387a02545587b8c1ef578a804a0617510ba868612d6df59cd657ab69012caafb5dd9ccb5fe0c6bba1e69df59d1f83799687677d1b5bb9e3f1615e8b648587203428a", 0x46) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) signalfd(r1, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8) [ 1659.209389] loop3: detected capacity change from 0 to 40 [ 1659.215654] loop2: detected capacity change from 0 to 40 22:31:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x80000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) [ 1659.240093] loop5: detected capacity change from 0 to 40 [ 1659.301173] loop7: detected capacity change from 0 to 40 [ 1659.303505] loop0: detected capacity change from 0 to 40 22:31:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x6e) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) [ 1659.433291] loop4: detected capacity change from 0 to 40 [ 1659.445509] loop3: detected capacity change from 0 to 40 22:31:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:31:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1659.509741] loop1: detected capacity change from 0 to 40 [ 1659.564656] loop0: detected capacity change from 0 to 40 [ 1659.573392] loop7: detected capacity change from 0 to 40 22:31:51 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000240)="153406d4cd83162b29de966071380bb1fd802ae3fc40d7c76a620b325a48dca24a2feacf6a731b63464a03a760ad77421410682587344220b214d079a6d1eb6fd8869bcd7577c1481812b38441403c745b1bc69808d291d7691a55044a2a94fb31aea1b5b6523639454edd61c7b8082b7ead7500b354fae91be9ccf6842720efa4d0bcef62", 0x85) write$binfmt_aout(r1, &(0x7f0000000340)={{0x107, 0x0, 0x4, 0x8, 0x3a6, 0xd14b, 0x2a2, 0x7f}, "4fb5c36c7809f79441d07c42f5f6f29738f0c43cc3af5b05cfd315fd73fea9a2063332880cb831bf253a5f828d870c47d30701ded49fd99c3f2424ae01879207ed9a217a7dcadd4cb0d290e29138236b361587ddc120f506c1ee14fc3490c583", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x680) dup(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) sendfile(r2, r3, &(0x7f0000000000)=0x6, 0x5) 22:31:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:31:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x40) 22:31:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1659.818671] loop3: detected capacity change from 0 to 40 [ 1659.832042] loop1: detected capacity change from 0 to 40 [ 1659.865380] loop4: detected capacity change from 0 to 40 [ 1659.925686] loop0: detected capacity change from 0 to 40 22:31:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1660.031390] loop7: detected capacity change from 0 to 40 [ 1660.133761] loop5: detected capacity change from 0 to 40 22:31:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) [ 1660.284640] loop3: detected capacity change from 0 to 40 22:32:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) 22:32:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="04000000646f73766f3716000000800000000000774f9b3ab422634c3f28150bbee500000000", 0x26}, {0x0, 0x0, 0x2800}], 0x4410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) r2 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)={{0x0, 0x0, 0x6, 0x1ee, 0x245, 0x1, 0x243, 0x3f}, "5106a72eef58b3a65bd48b5fa6f399ea687961b8db48ee1b55dd01193c009b38f3bf74fa56dc333e44c65695ca083152f8fbc66c164ba5cfb0014d5df03ed76800a888fa019bda4147c15f33e1c94e92dbef3f803e17cf349ee370c25a6cd59fc0d8ccf2b2255e19dd8c10379e462abfb86d1fb23f41a92cd1039bcb41234281cbf2e1d2d43a90eacb85c8b5315c6331af1bff12c28c07", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab7) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x81, 0x5, 0x6, 0x5, 0x0, 0x6, 0x9014, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7, 0x8}, 0x80, 0xb1cf, 0x7509, 0x9, 0x10000, 0x401, 0x1f, 0x0, 0x3ff, 0x0, 0x8}, r0, 0x0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x8, 0xfffc}}, './file1\x00'}) write(r0, &(0x7f0000000300)="8f", 0x1) 22:32:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000017c0)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="eec2af402becde3a1eaed1999c246a4c254accbcadc26a89cf120a4f05a07b3bbb9c49adfb79ba2634d2493f6172e9ac1196a8564c5ee22d2aeb5c7ea77d77d3d6231a8aca7e1978c6bc15977a273823eb5f7d7d6b9ff843edb480e50cc3823218db6727bb3897282b29bcbb419ec7d76a54bd27c3eb7e1ad032d361367e7d84b2de08dcf5fa724c460c66fae218ba944576c63cabc5758fb68fab927e4ce0364eb5261143a5ca586ab04726c079c6692431a123e6e2ef7e23a5def25db66d02b488"]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001340)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getegid() fchown(r3, 0x0, r4) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000015c0)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=r1, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB="02000500", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="03000a04a5419a0ce45783969860c7c225049d74e06a909a2fba032cca1e5ae1f45568e3831ea998281227f211468378f292", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0xee01, @ANYBLOB="02000500", @ANYRES32=0xee01, @ANYBLOB="040003000000000008000600", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="10000000000000002000060000000000"], 0x74, 0x0) r5 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2, 0x24) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="66696c65802a43c6534782f9d7ac3000"]) r6 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000340)={{r6}, "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"}) write(r0, &(0x7f0000000300)="8f", 0x1) sendfile(r5, r6, &(0x7f00000000c0)=0x3f, 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:syslogd_var_run_t:s0\x00', 0x27, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r7, &(0x7f0000000140)="a3", 0x1) ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f0000001580)={&(0x7f00000014c0), &(0x7f0000001500)=""/97, 0x61}) 22:32:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1672.717732] loop1: detected capacity change from 0 to 40 22:32:04 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x20000a, &(0x7f0000000240)={'trans=unix,', {[{@version_u}, {@privport}, {@access_user}, {@debug={'debug', 0x3d, 0x4}}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}], [{@uid_gt={'uid>', 0xee00}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x61, 0x30, 0x61, 0x37, 0x34, 0x33, 0x64], 0x2d, [0x63, 0x65, 0x62, 0x33], 0x2d, [0x36, 0x37, 0x65, 0x33], 0x2d, [0x33, 0x67, 0x66, 0x39], 0x2d, [0x34, 0x30, 0x30, 0x30, 0x33, 0x34, 0x31, 0x65]}}}]}}) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:32:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xa280, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:32:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1672.727501] loop0: detected capacity change from 0 to 40 [ 1672.735176] loop3: detected capacity change from 0 to 40 [ 1672.749601] loop7: detected capacity change from 0 to 40 [ 1672.751591] loop1: detected capacity change from 0 to 40 [ 1672.760142] loop2: detected capacity change from 0 to 40 [ 1672.761808] FAT-fs (loop2): bogus number of FAT structure [ 1672.762178] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1672.764465] loop5: detected capacity change from 0 to 40 22:32:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) 22:32:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1672.796760] loop4: detected capacity change from 0 to 40 [ 1672.810690] 9pnet_fd: p9_fd_create_unix (9869): problem connecting socket: ./file1: -111 22:32:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x200, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x8000}, {0x0, 0x0, 0x2803}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000000)='./file1/file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) [ 1672.844708] loop3: detected capacity change from 0 to 40 [ 1672.851940] syz-executor.5: attempt to access beyond end of device [ 1672.851940] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 22:32:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1672.853582] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1672.854459] loop0: detected capacity change from 0 to 40 [ 1672.883618] 9pnet_fd: p9_fd_create_unix (9869): problem connecting socket: ./file1: -111 [ 1672.911284] loop7: detected capacity change from 0 to 40 [ 1672.913515] loop1: detected capacity change from 0 to 128 [ 1672.927443] FAT-fs (loop1): bogus number of reserved sectors [ 1672.927912] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1672.954517] loop1: detected capacity change from 0 to 128 [ 1672.960184] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 1672.991175] loop0: detected capacity change from 0 to 40 22:32:05 executing program 5: prctl$PR_GET_TIMERSLACK(0x1e) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1673.029443] loop7: detected capacity change from 0 to 40 [ 1673.034295] loop5: detected capacity change from 0 to 40 [ 1673.057770] loop4: detected capacity change from 0 to 40 [ 1673.082746] syz-executor.5: attempt to access beyond end of device [ 1673.082746] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1673.084436] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1673.100888] syz-executor.5: attempt to access beyond end of device [ 1673.100888] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1673.103134] loop0: detected capacity change from 0 to 40 [ 1673.104816] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1673.578364] loop2: detected capacity change from 0 to 40 [ 1673.580426] FAT-fs (loop2): Unrecognized mount option "/file0" or missing value [ 1684.602604] loop5: detected capacity change from 0 to 40 [ 1684.619440] loop1: detected capacity change from 0 to 40 [ 1684.622452] loop4: detected capacity change from 0 to 40 [ 1684.623123] loop2: detected capacity change from 0 to 40 22:32:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)="f6c39233cd6f115bdc2a32bc58432df11a50d3048d4a4e60686e415d394f4872a3052dbbe3fa43a8271d1abcb87189507cf919429cc0", 0x36, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:32:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:16 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r4, &(0x7f0000000140)="a3", 0x1) recvmsg$unix(r2, &(0x7f0000001980)={&(0x7f0000000780), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001900)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10000) r6 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000001c00), 0x47fe, 0x80040) io_submit(0x0, 0x9, &(0x7f0000001c80)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x400, r3, &(0x7f0000000180)="c677b477e37f0f4b70f05df44360237ada7c289d92c29d9ee3c8c0ca47a498c815f38629b7619606839102f157d58d211d7bf1a185da51f4cad58232f1edab66239d48d263097f3a87828af264e4394f4cfcc3c471b3afcc1fd2", 0x5a, 0x17560000000}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffffffffffffffff, &(0x7f0000000280)="5e7257b92f1b171d0a8ecfdb581971d1d0660ef8c01a867cf11fd06178987bd90c63a75a7519d6b8c52cdc62169b1abdf5e0e37d6449bd575729871b8eebd574b0b6f49e84c5f550001279fd68", 0x4d, 0x5, 0x0, 0x5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x81, 0xffffffffffffffff, &(0x7f0000000340)="e3d905e4e564b98c3cb2216b95bc67b156c35113d4674bf86567b9491a4d0ed83a1fa87a3ae8e4a00d7941afd349ada4075436fefccb99ccdc6c7a6dbefc82990fd7e5a3178795330e65befeecdd098d0494c64aeb73d282006d70989e9c49fb75183e22de996cdbf2c1c48c5a4a6348d1f293a841e83789e518f6729356c700b1c3588e0d", 0x85, 0x7, 0x0, 0x2, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xffffffffffffffff, &(0x7f0000000500)="81f621c8a8df519c91f9be02e2a38931004b66998355868ad446d75e9d3d0ea92909bde1eabb02fc0ad0bc8c6dcc2394d77c9b025a5414f28a44d6fd9762fc9a76ad8b48abe791b503a30f602b1721104b3be2c59b564d0cb50a2a25aeebd6a0d25a544e067b60bbe0f22edd52470206ebb917ac63edb78331493a1bd562570da72f3868922aefe90eaecea4d08799", 0x8f}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8, 0x21, 0xffffffffffffffff, &(0x7f0000000640)="5d68701bd1b74078445b33d36083c9da3f54ccd157bab503b92a440a3cbf", 0x1e, 0x5, 0x0, 0x1, r4}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x7, 0xfffd, r0, &(0x7f00000006c0)="b5ebca058c70218ad8a39fd8264fedbc69366f0f3857b2519ed772a6302e3d35f0c906e571b2ad54930f5951947de121ef6d8118885847a09b936f75a3a2f3ef474cd2b8ea67938cd36c69701190bcd89a60bb98b3c95bf05e451fa8ec7cfa96a62e3d334caa18476eae44b779f67136b9217c9fdad368a97cdbd4dd4312c1e394e685f0d1847a353d0168", 0x8b, 0x4, 0x0, 0x0, r5}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x3, 0x4, r6, &(0x7f0000001a00)="5c6940fb2c8c12bbdd3b18c9a73361349b00eb2121f075cbcf97e4f0cef7182d8c09d35c9299437b9116", 0x2a, 0xa1, 0x0, 0x2, r2}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000001a80)="c63fefb1e4de2e4561597ded21827865b21b7823311f7dfe8d918f79a896cd7f2425f11b59110d14b7386a0abeba349d48ab4e5ab545a672df1a51f0871bbd2579a62a5b884f8f76e9e79999409c52ed029162c7a647bd187d0cf1ed4fceb06f6caaa5f038c9d2c031a7bf10f889c4140daabb8f551de52fad04e7ac054d382d64c7a29276ee272a22b974e24b9bb651d95afb1cc1d523893fd160ca28d75793ca032d5590ebe75bd7ae297498", 0xad}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x2, 0x9, r7, &(0x7f0000001b80)="b33dac37d8a3d95ec9455f56d73c2f8f3bdc993f98df424845e298c4d07dd358bf55e5b301443400ee3a0241c1f0ce660a67f5e2e9e38d9482f0e23ea8959770c7c36864e15eb5b448986124bd778b1a8824dd74ea43ca8f466042d1a63e9c6354ecd15285", 0x65, 0xd1fc, 0x0, 0x1, r8}]) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x101000, 0x10, 0x13}, 0x18) sendfile(r2, r1, 0x0, 0xfffffdef) 22:32:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r2}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0xa, 0x20, 0x80, 0x21, r2, r3}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xfffffffffffffffd, 0x38}, 0xafb, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x1}}, 0xe8) setresuid(0xee00, 0x0, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r4, &(0x7f0000000300)="8f", 0x1) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380), 0x16000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001840)={{{@in=@initdev, @in=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) syz_io_uring_setup(0x101, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000040)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=""/102, 0x66) syz_io_uring_submit(0x0, r6, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001580), &(0x7f0000000140)='./file1\x00', 0x8, 0x2000, 0x1, {0x0, r7}}, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r8, 0xd4, 0x0, 0x20, 0x4, 0x1}, 0xe7e) 22:32:16 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000840)=ANY=[@ANYBLOB="010000006eb970a5b10100000018000000", @ANYRES32=r0, @ANYBLOB="ffffffff000000002e2f66696c653000"]) r2 = accept(0xffffffffffffffff, &(0x7f0000000740)=@generic, &(0x7f00000007c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000180)="ba7ba49d4f23ad4d59dc93c193feb590567df1d45c98f56a5e16dfd5a311d5d88bb3cbd75ce1781c46e316a59b1d1b0b63978ea944caf9ac70bce7d966a35c65f0d98d52710a4cf73b909d51a24aedb8", 0x50}, {&(0x7f00000000c0), 0x0, 0x8001}, {&(0x7f0000000240)="2889a1ae1df1d2898c6cfa777a265c72bfafd0cf2ec807c6ac8eda500d81d2945a213de45ff2f2f9285231349f9295776f6f041d218cc6c0986b9eda5b05e7ba34b33cc09d039a7822e36c06a4771c05ea4f8cc0e5a262c9ee3d1135b894d34630395568950a10028ca246f21b484d183f754942c316cb84a392bf14e99d563412c3b45eb62965d968d84ff9547639d660e351d516259bffa2498a37cbf60268935fdc9df83abe8ed20f0687", 0xac, 0x6}, {&(0x7f0000000340)="efe21fb472b03cfe2876d80f9577ed3b323d3cbb017f4e18effa82f5153797a793c61fed864fa309b37e3a6efc4828ddbc36aa5c543838a3c7bafdcba9cb7cb986ca845acaabe9e8b1d26236b1ef8eb3e269955376e5ce108acd33b05d3c5e696bee58d988ccf6e1aa06865560c3f0bf15c589f705e562cfea63e5f5e804c93641607c94eebf3e02a5ecbaa773e3c800", 0x90, 0x43}, {&(0x7f0000000400)="ebbbd0801d0a692dea9e9505d7bf1b4ba1b703ea0c6bec79d96ccfb28d7016f424dc2b9a173ff98782c23fb00e6228fbfb82801ed631d71c9b64fdf7e1d5c2f3f80806c84d90deec074d79740bdd93fb9091ab5706bd97451ce0011685cfd4229996903bdb854d6724bb1dc161489933f97ef76cf7146113b280a5fb8c4051fae5f38cfdcaadd90be78b6e64b357047c79fa5c861fe20d0c6c6f0f8688a781ad61d021c2aaf76e80bff54024ccb14a261774786f471a9f66d32360ed8b3fe79d4228df27", 0xc4, 0x8}, {&(0x7f0000000500)="334b89e0e56359e67c34993fe187353cef2e6814fcb66a1de30a08bbb9c13646dede4c052c4f54bf823a75d383389b0d32406188ef5d6b2b511b5752e3974cfd745dc431359bfc68f909beb9861ebc282171d2379571fd29c39add3a1b41e0337c4068c12475f77086bb5524597975bb68034096c78e90faef8eda4ef9a9622595627fb01df9e0c33a7b89507befa1c59c5777e33872ac9796a6937e7ce77faaef5496058db66cdcc17431ee", 0xac, 0x5}], 0x1000020, &(0x7f0000000680)={[{@shortname_winnt}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@numtail}, {@utf8}, {@shortname_mixed}, {@rodir}], [{@obj_type={'obj_type', 0x3d, '{!@^^['}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x39, 0x35, 0x37, 0x64, 0x65, 0x39, 0x38], 0x2d, [0x0, 0x63, 0x35, 0x37], 0x2d, [0x36, 0x5b, 0x62, 0x33], 0x2d, [0x39, 0x33, 0x38, 0x37], 0x2d, [0x38, 0x33, 0x37, 0x39, 0x0, 0x65, 0x34, 0x65]}}}, {@seclabel}]}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000300)="8f", 0x1) [ 1684.678694] loop3: detected capacity change from 0 to 40 22:32:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) [ 1684.698440] loop7: detected capacity change from 0 to 40 22:32:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1684.723653] loop0: detected capacity change from 0 to 40 [ 1684.749685] loop1: detected capacity change from 0 to 40 22:32:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000fc0)=[{{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/93, 0x5d}], 0x6, &(0x7f0000000600)=""/39, 0x27}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/205, 0xcd}], 0x1}, 0xfffffff7}, {{&(0x7f0000000780), 0x80, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/145, 0x91}, {&(0x7f00000008c0)=""/12, 0xc}, {&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000000b00)=""/97, 0x61}, {&(0x7f0000000b80)=""/43, 0x2b}, {&(0x7f0000000bc0)=""/133, 0x85}, {&(0x7f0000000c80)=""/23, 0x17}, {&(0x7f0000000cc0)=""/62, 0x3e}], 0x9, &(0x7f0000000dc0)=""/143, 0x8f}, 0x2}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)=""/125, 0x7d}, {&(0x7f0000000f00)=""/44, 0x2c}], 0x2, &(0x7f0000000f80)=""/21, 0x15}, 0x3}], 0x4, 0x121, &(0x7f0000001100)={r3, r4+10000000}) write(r1, &(0x7f0000000300)="8f", 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)={'L-'}, 0x16, 0x0) [ 1684.831419] loop4: detected capacity change from 0 to 40 [ 1684.836708] syz-executor.5: attempt to access beyond end of device [ 1684.836708] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1684.837590] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:16 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r0, &(0x7f0000000140)="a3", 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x5ad000, 0x68) write(r2, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:32:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000647c7366d8a02b00080101006e400020009e03", 0x17, 0x40000000000000}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) 22:32:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1684.917544] loop2: detected capacity change from 0 to 262144 [ 1684.931293] FAT-fs (loop2): bogus number of reserved sectors [ 1684.932137] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1684.933630] loop1: detected capacity change from 0 to 40 [ 1684.946211] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 1684.950447] loop3: detected capacity change from 0 to 40 [ 1684.968350] loop2: detected capacity change from 0 to 262144 [ 1684.971454] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 1684.994411] loop1: detected capacity change from 0 to 40 [ 1684.995274] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 1684.999328] loop0: detected capacity change from 0 to 40 [ 1685.448130] syz-executor.5: attempt to access beyond end of device [ 1685.448130] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1685.449116] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) 22:32:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x110, r1, 0xd2f72000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x2, 0x59, 0x4}) 22:32:28 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) r5 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001840)={{0x1, 0x1, 0x18, r1, {0x80000001}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000240)="07a0db4e514c7afaaf13cae5811fa4db7875265565ec090b8d699470a87f7d2b21f6f62671f5ac7b366b9fa69a7fd3a921430225a0a5b5034dca1fcb84a23ff0dc7c43c9369c6c2702dcedfffb79bd14c828e277d5ff4100f06a69cd4c3039e2e5d79f570786f8964c838f59e3c3e312373284dc475521b962b64ad99aa62b9ca8742bc16d7fdd7c70652e95ccf301a01ef77ee9654633f9860ac8eb35bf31e3215731641ddbb9a0f1d541dacc1a993a7d60eb9a8058", 0xb6}, {&(0x7f00000000c0)="906357a20b3b", 0x6}, {&(0x7f0000000300)="0ac36f855fdd8e13ed9037bd1c616bc46a218d89", 0x14}, {&(0x7f0000000340)="dddf0b96102903a7c5683b562b17d8d391e25d68f778714a0843cfe47cfa98205fbf78beb2f6a91f8c02fe7b7a9075377e1bcdb7d6ce8ddd2716ebc4140f0eab16523478fe19ff32d2c65cc3db1aa239d649209f24a8f65a2151ee5e43fb2073bf0f44ddcab8a343e81129972d7b360f61a5a49d2146df49b6ea79be24636c02a59cfe506410eb632edc1f240dd7e5d94f33ae2da208751174127bf0461fd8d995c871f1a79360e690f1dac1fa5666ee63a585dcdb671c6a0e7e93b64f68c10a04e8", 0xc2}, {&(0x7f0000000440)="9b96378ebf4151c92791", 0xa}, {&(0x7f0000000480)="614d5a7da96e3cdf554292c6fd6b801ca21d9ec0d8d7e0b5d86cd3dd39de0b8881b20dd055a885f807972a26cb10bd669dcc7042167be5bffe76e329697d430af92196a6b8ba9dffe30864e01e823dfd5b47", 0x52}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="fa6d51f2ea0c9c94659dd4f404b1b77b6e388d83215a81840a5bc9e21f17af12905fc863fe73dcab7fdff9a06e9c0b8e8344c8458b5a7429d9ab3bd8f542f944dc922dcb884b4d534648b558d78bc6fb246749233e865e08ab797efa1c03c36fd97d82c7f38f946dae93a6c0c7c2b800bbcf843301dea056656703daa370b447d7019850de488509c8b8ff15dabb6cd21af989a634da7972c02da9b8fedfbd0598d4bea54bc227e4c33d", 0xaa}], 0x8, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r3, r6, r7, r0, r8, r9, r3, r2]}}], 0xf0, 0x8010}}], 0x1, 0x4000) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:32:28 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x7, &(0x7f0000000540)=[{&(0x7f00000000c0)="04000000646f7366f80100"/23, 0x17}, {0x0, 0x0, 0x5}, {&(0x7f0000000000)="92e266e28f55cff540d5652666d40ed0bcdfee98d9a45c4519a776d08ed9b6491605cc02972ce90f815c2de6", 0x2c, 0x2}, {&(0x7f0000000200)="09372eed6929f5d49749acf24d942892fb454de3653df410d07b1da70e11d62a232ac37809afcf9f8656de471c0f91f425f270b5bdd6acb4db564c80babadf2759d8d14641913175aeea9a8616b56f5fec6b25b60519fb07e6c39d690f3826728c76845ef742f81b0310ca307ac0bf964d20e83e1722a3fe24aee76c4cb702a60683746612f2951a50bd9ee98d6c05d4f3d36b64dbb4fbc3c95f20546c6b0c009e3eaa2c33c45c62452886f69e3f5de842e19667346a3142c18c9a0b493bba8e34d01d9b8a445f1942e478a4a2e7b4", 0xcf, 0x401}, {&(0x7f0000000340)="837b181d33193cd6e88b502ead541ca26bd1ba23b5fee433bcd8800c7d8da7a7be918bef0cc44bce239e6806c4f460713e51dd294d3c6a31642702f10d9f543b2d7009cf8d94a97e6a41bf01a123e51946eb967095271578e544f834950226bc8a31ddfe3935b894d44094686b2c5701246a9c82efe3e0712982d15755749bdae9de7f442ff35d9186ce787175bbd59cdc7b58f5d0845fd457e40f9a25c6cace8e89167218891163844140f0f876088518453a4b2c5d275e", 0xb8, 0x37}, {&(0x7f0000000400)="d075d46824fe5f58ab559783f5409be86410fa1b67c9e35e825d3964976435f7d879fc26fd78da214dd9ebb70d4d8fef39e7edcfbd5c2e634f79ab0f0294813849bb38f41136e0c2a28d59be1ba51ff858", 0x51, 0x8}, {&(0x7f0000000480)="c779e80752b061bb13478bb28fb52e49c2a483a3aa76b7281bbe72c6dfa5b47320a26925b92aafc87fc29208fa8f49a93a1809ed521af320e291a53dc79a0ee0f7737cf30fec9b3a0a9aac5a1a2bb7ce8d1fe1aaea41ddaa172ee07b380026ac01b6e76fdc73967e2d314b4dceb3eaa8586f3a804b49332395d1ccd9588558d7d4b2ddaf69cba617fa226607a6af82fe1b5c18", 0x93, 0xb0}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x80000, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x47) 22:32:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x0, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1696.700316] loop7: detected capacity change from 0 to 40 [ 1696.704663] loop2: detected capacity change from 0 to 40 [ 1696.749068] loop1: detected capacity change from 0 to 4 [ 1696.766354] loop4: detected capacity change from 0 to 40 [ 1696.770726] loop5: detected capacity change from 0 to 40 [ 1696.775741] loop3: detected capacity change from 0 to 40 [ 1696.776476] loop0: detected capacity change from 0 to 40 [ 1696.777614] FAT-fs (loop1): invalid media value (0x40) [ 1696.778361] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1696.799160] loop1: detected capacity change from 0 to 4 [ 1696.813053] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 1697.016615] syz-executor.5: attempt to access beyond end of device [ 1697.016615] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1697.018315] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1710.967649] loop2: detected capacity change from 0 to 40 [ 1710.972209] loop7: detected capacity change from 0 to 40 [ 1710.984732] loop1: detected capacity change from 0 to 264192 22:32:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x6938, 0xfffffffeffffffff, 0x2, 0x9, 0x1, [0x1c8add4, 0x2, 0x80000001, 0x8]}) 22:32:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:43 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fallocate(r1, 0x1, 0x9, 0x10000) r4 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x321042, 0xa2) r5 = openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x1000) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r3, 0x0, 0xfffffdf3) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x7, 0x4, &(0x7f00000013c0)=[{&(0x7f0000000240)="b85421b9822c4a83267a5f74c9a8a433e37cc12e786660e1f8e1ad2aed099bd4c6d4a228eeb8d414bbb0f79a1ef5b905fdfbe23e0dbe340998aa250814cd09f559288dd6ae214215eb11beb2477611c0a9b2019cd2cc44189762137df4872fc64cd4e89e99162fb181ec56", 0x6b, 0x6}, {&(0x7f00000002c0)="a018137596d4c055f20d0abf7fd87405cba9ea1be267071d6db06cd3dab32cf7743593553ed7776d5f7d34c4c4cc80a9f86e0e447168065c99cab66ddf9dcd408edcb6af460ac13eac96ecdffeb2da6574be39e5ff6dbad3920046249b722cb3a927da583e5949", 0x67}, {&(0x7f0000000340)="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", 0x1000, 0x7}, {&(0x7f0000001340)="8c99efcc5b2443eb6a99aacec69e2defa1d7fda604208442d7581180d3d50f87adaf02ad689513b452532ad0adbbf4ad495d2af9f1c77a8d06bf65802bff140119de641684ab301bff862ff5a3fe49208fced4f41e23f5479d7728d10c73420d5d3a93b03f9938f20f61a48f", 0x6c, 0x8000}], 0x50, &(0x7f0000001440)={[{@nodelalloc}, {@nodiscard}, {@grpid}, {@prjquota}], [{@measure}, {@obj_role={'obj_role', 0x3d, '\')}.\\,%\r.[\''}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup.type\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) linkat(r6, &(0x7f00000014c0)='./file0\x00', r7, &(0x7f0000001540)='./file0\x00', 0x3000) 22:32:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x0, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1710.993981] FAT-fs (loop1): bogus number of reserved sectors [ 1710.995045] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1710.996316] loop3: detected capacity change from 0 to 40 [ 1711.025192] loop5: detected capacity change from 0 to 40 22:32:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x3) 22:32:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x80001, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r3, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = signalfd4(r1, &(0x7f0000000700)={[0x3]}, 0x8, 0x0) openat(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x5e0, 0x108) accept4(r5, &(0x7f0000000b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000bc0)=0x80, 0x80000) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r7}) stat(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0xa, 0x20, 0x80, 0x21, r7, r8}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xfffffffffffffffd, 0x38}, 0xafb, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x1}}, 0xe8) recvmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f00000005c0)=""/202, 0xca}], 0x2, &(0x7f0000000700)}}, {{&(0x7f0000000740), 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/28, 0x1c}, {&(0x7f0000000800)=""/82, 0x52}, {&(0x7f0000000880)=""/49, 0x31}], 0x3, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x60}}], 0x2, 0x1, &(0x7f0000000a00)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x15, 0x3, &(0x7f0000000240)=[{&(0x7f0000000180)="6d2352b1574fc78e3e9654b2dd1b", 0xe, 0x1433485e}, {&(0x7f0000000340)="6f12b437eb18c464e33ba278c9ed19ea2375cf20e340a4db2ff442eead881f360a72c351a36846865980df9840c2699fff6bd5f743a7196f93083483193a32813bae4e381c33719f218f0020da69c24925c733e5611ae80da25331c732eaf348b6b20756aebdd765cf6e382d07d97ffd7f1b5bb5a24b18e79809718d8234b06af87e9e53af23738a8632ece4c0f51347285360eee181a38d95828179c53794614f51163a0875136ea6b61d8877a11007107f01b2542aaa7fd3e0d3a4a68048ffb9441ca1e3c2cb57116189e19c0d0898f2e123026ab6772a6910b2705e84561dae21e1575779ab7c605f3ca84087cf66e56b5c8f4e51", 0xf6, 0x4}, {&(0x7f0000000440)="6edb6b6b9c562899a77aab79bf87580e9fb750ba6176d3c26a2f4778a364bd7653ec0de6c17d62869d5bcdee8a46d60cc868ee70c7ebae1487abb3d558e82af2e51adccaa74bcd3c38bf6cecd023fbe007ee8c743c53871e341181f245996b004fb9b4dfa99e4149dbc0edf325d468cb11a18175bb58fa3f71e622a96a47028ee81f63b4ba35e05c3fa78baa1df9e8252735437750675585e684de16b09cceebb4f6810099f812d4ae8d2f30ccbb7cdf339f4dbf43da3eafee9364adf4fabc8bebd0b073235c", 0xc6, 0xffffffff}], 0x85, &(0x7f0000000d00)=ANY=[@ANYRES64, @ANYRESDEC=r2, @ANYBLOB="2c657569647f3c2c2948865849d26ba2b97b8e79b9cf53a4ad9199b4dfbb4a653dda02fa0576af378c2497069fa3bd5ca8f45b155b5459a9536381ef69553699bd714dcd0723e44ca5098129e24b9d38b55df890fcf8753b28794ab7d738ba0b66c2ae", @ANYRESDEC=r8, @ANYBLOB=',fscontext=user_u,euid<', @ANYRESDEC=r9, @ANYBLOB=',smackfstransmute=,}^::$,\x00']) [ 1711.043570] loop0: detected capacity change from 0 to 40 [ 1711.048667] loop4: detected capacity change from 0 to 40 [ 1711.049503] loop1: detected capacity change from 0 to 264192 [ 1711.058196] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 1711.110777] syz-executor.5: attempt to access beyond end of device [ 1711.110777] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1711.113141] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x60c840, 0x85) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x1001) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x3, 0x9}}, './file1\x00'}) 22:32:43 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file1\x00', 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) 22:32:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:43 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=""/165, 0xa5) write(r1, &(0x7f0000000300)="8f", 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x20}}, './file1\x00'}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) ioctl$CDROM_SEND_PACKET(r2, 0x6, 0x0) dup(0xffffffffffffffff) 22:32:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1711.224621] loop2: detected capacity change from 0 to 40 22:32:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x0, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1711.280760] loop1: detected capacity change from 0 to 40 [ 1711.305218] loop7: detected capacity change from 0 to 40 [ 1711.315517] loop3: detected capacity change from 0 to 40 [ 1711.319066] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1711.361671] loop4: detected capacity change from 0 to 40 [ 1711.363530] loop0: detected capacity change from 0 to 40 [ 1711.806256] syz-executor.5: attempt to access beyond end of device [ 1711.806256] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1711.808387] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1725.051434] loop5: detected capacity change from 0 to 40 [ 1725.057408] loop1: detected capacity change from 0 to 40 [ 1725.061491] loop2: detected capacity change from 0 to 40 22:32:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) splice(0xffffffffffffffff, &(0x7f0000000480)=0x3, r0, &(0x7f00000004c0)=0x65c, 0x851, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x1, 0x3, &(0x7f0000000180)=[{&(0x7f00000000c0)="6a73c58256ec263afb075cb6de2502325d966d14c8e60a8ccf1a8f7c0e7b", 0x1e, 0x14}, {&(0x7f0000000240)="358edb48508e9d0183bb2456d607e44fa0d97acc4dd15bee8dd32948fa0c973e00316aa402ca2c3090863aa50306097ca2bf4a7c04065c6477b3d99927fcff1796fd471f09617438d77a9ce3f7e76c1d596e8f6bd2deed9926319eb8adf83d199fb215683208077160c04c17dd6fa2f73bea9dda4129c40b30789b0d10fb2ab70e90ffaaacc687c5993481fbb78dfe3ac3a614822ae4", 0x96, 0x7}, {&(0x7f0000000340)="36089c430bc33d58ee35753d83766decbfa6123b033581db3344c40a172d47d85abe94b323d99c96e15a344f343c7253309f60d8defe597fdb5e3fec4d0348b2072e60cef2d0f45c44444b6b661140e074a8258adb9c8b8c14f6e074cab658de9cf1ca6eb794f46e141795d8b2fe84f69d3e4afc293084603c480687023f15fe71968a7289e8305300671c7b259eb0", 0x8f, 0x46}], 0x1020000, &(0x7f0000000400)={[{@numtail}, {@numtail}, {@shortname_winnt}, {@shortname_win95}, {@shortname_mixed}], [{@dont_hash}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 22:32:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x648180, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:32:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:57 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x329042, 0x16) write(r1, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:32:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x0, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xfffffffffffffffd, 0x3, &(0x7f0000000440)=[{&(0x7f0000000180)="7d7aed2b9fc77126cc808636f3abdab268a815c3e721132dd9a26b2f56e51d3761f61e0cc026b018816a", 0x2a, 0x1}, {&(0x7f0000000240)="5dc6a763a05c13fb237f9be217bf56204d7563f46eca406fa18e3ed644d10b1e404a0c7fb6270114fd161f333737206b0aee84c3f383c8ad5238459689e61c9c1369d89463b32997557f6960e57ccd33855198d991b42ab49f8e4a1d", 0x5c, 0x6}, {&(0x7f0000000340)="8ea2454f0da567497b4db0a33279f53409b244df0ad2a870f8429ff6a46e758c26042e0303ce42c5b4986d4db5b49fb2a8c809a2905130b761222444368177c7975a32dfc969ace4c2bea955ce54ac25552453e4d0c4f405e92be059ef793269263196249954d7d5c0a545b4045b31f7f2ba51e359d62155cdad61fdd8fa42713ee53e79ef63c7ea6c58f2fced6f3c4f9f7d255e6c8812315900ff089a8a8f47649dc0e940d94b04b162b53f9f43e6a78618c8b4bb201584c201a4895cca91a16027cd317c20aa081284bef460b8e8de2154984642c86e3312b4f3bf8e3171e22c814e230b6c24", 0xe7, 0x5}], 0x14014, &(0x7f00000004c0)={[{@nodots}, {@nodots}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) [ 1725.066401] loop3: detected capacity change from 0 to 40 [ 1725.068739] loop4: detected capacity change from 0 to 40 [ 1725.071546] loop0: detected capacity change from 0 to 40 [ 1725.079203] loop7: detected capacity change from 0 to 40 [ 1725.113754] syz-executor.5: attempt to access beyond end of device [ 1725.113754] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1725.114726] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1725.134159] syz-executor.5: attempt to access beyond end of device [ 1725.134159] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1725.135209] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:32:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r2, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x8, 0x0, 0x1, 0x0, 0x9, 0x400, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x92e69484ee64bc2a}, 0x1000, 0xfff, 0x9, 0x1, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x3}, r1, 0x7, r2, 0xb) 22:32:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='user.incfs.size\x00', &(0x7f0000000340)=""/213, 0xd5) write(r0, &(0x7f0000000300)="8f", 0x1) 22:32:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x4}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) 22:32:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0x0, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:32:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:32:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x4}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) [ 1725.203155] loop1: detected capacity change from 0 to 40 [ 1725.204721] loop2: detected capacity change from 0 to 40 [ 1725.221731] loop4: detected capacity change from 0 to 40 [ 1725.236591] loop0: detected capacity change from 0 to 40 [ 1725.242295] loop3: detected capacity change from 0 to 40 [ 1725.252597] loop7: detected capacity change from 0 to 40 [ 1725.257251] loop5: detected capacity change from 0 to 2 [ 1725.268570] FAT-fs (loop5): invalid media value (0x40) [ 1725.269253] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1726.092613] loop5: detected capacity change from 0 to 2 [ 1726.096343] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value 22:33:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0x0, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = open$dir(&(0x7f0000000000)='./file1\x00', 0x2, 0x165) openat(r1, &(0x7f0000000040)='./file1\x00', 0x2001, 0x40) write(r0, &(0x7f0000000300)="8f", 0x1) 22:33:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8002, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) 22:33:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:33:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x21, r4, r5}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xf720, 0x38}, 0xafb, 0x86e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x9}}, 0xe8) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001240)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/46, 0x2e}, {&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/39, 0x27}], 0xa, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/198, 0xc6}, {&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000ac0)=""/192, 0xc0}, {&(0x7f0000000b80)=""/237, 0xed}, {&(0x7f0000000c80)=""/216, 0xd8}, {&(0x7f0000000d80)=""/47, 0x2f}, {&(0x7f0000000dc0)=""/202, 0xca}], 0x7, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000001140)=""/68, 0x44}], 0x2, &(0x7f0000001200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x3, 0x0, &(0x7f0000001340)={r6, r7+10000000}) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2400, &(0x7f0000001380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@access_any}, {@access_any}], [{@audit}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r8}}, {@dont_measure}, {@measure}, {@audit}]}}) dup(0xffffffffffffffff) 22:33:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x125c2, 0xcf) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:33:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x103680, 0x101) open_tree(r1, &(0x7f0000000180)='./file1\x00', 0x8800) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) r4 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80000, 0x20) open_by_handle_at(r4, &(0x7f00000000c0)=@xfs_parent={0x1c, 0x82, {0x8, 0x2, 0x80000001}}, 0x240080) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1738.854321] loop0: detected capacity change from 0 to 40 [ 1738.886163] loop5: detected capacity change from 0 to 40 [ 1738.890199] loop1: detected capacity change from 0 to 40 [ 1738.890837] loop3: detected capacity change from 0 to 40 [ 1738.894489] loop2: detected capacity change from 0 to 40 [ 1738.913362] loop4: detected capacity change from 0 to 40 [ 1738.936656] loop7: detected capacity change from 0 to 40 22:33:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') rmdir(&(0x7f0000000040)='./file1\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x2a0102, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) [ 1738.988887] syz-executor.5: attempt to access beyond end of device [ 1738.988887] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1738.990419] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:33:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) 22:33:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x21, r4, r5}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xf720, 0x38}, 0xafb, 0x86e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x9}}, 0xe8) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001240)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/46, 0x2e}, {&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/39, 0x27}], 0xa, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/198, 0xc6}, {&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000ac0)=""/192, 0xc0}, {&(0x7f0000000b80)=""/237, 0xed}, {&(0x7f0000000c80)=""/216, 0xd8}, {&(0x7f0000000d80)=""/47, 0x2f}, {&(0x7f0000000dc0)=""/202, 0xca}], 0x7, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000001140)=""/68, 0x44}], 0x2, &(0x7f0000001200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x3, 0x0, &(0x7f0000001340)={r6, r7+10000000}) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2400, &(0x7f0000001380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@access_any}, {@access_any}], [{@audit}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r8}}, {@dont_measure}, {@measure}, {@audit}]}}) dup(0xffffffffffffffff) 22:33:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0x0, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1739.080211] loop2: detected capacity change from 0 to 40 [ 1739.100958] loop3: detected capacity change from 0 to 40 22:33:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1000000000000000000000000000000000000000000000006262de70e47a1164145d3e5fe548b79e3ad730cf99417482458b3174bf7053f3e88a329bd02a26f71ba577d6396a9f63cb60acb6c7feb95a14e31b1363cf8f5bfe9b6ea92c1164c70b510405f7471d996be664d57dfbbff3ce040b2aa84f7309f7daac88693e0fb05777c0443bf689d3e6ef79c098881ef58c5bf52d4f64408ed4f9a4d553399b29e5b9b2c6"], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0xa, 0x20, 0x80, 0x21, r4, r5}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xfffffffffffffffd, 0x38}, 0xafb, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x1}}, 0xe8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r6, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3, 0x6, &(0x7f0000002580)=[{&(0x7f0000000240)="a333d9f1e61c8b439a42c06151c13e80e21d43052517262076216fc1f82e293e07e7ea70be7082c1a8c7c6e14238aa92e4fd29e7d5fccb30dc85ed46eb2aed1d4e0ce04a5bc55feea8e7ce6b55c957ece546048c46d659d776950299d5fe6cbbacae92121791253e1d11fc88cef66371a8aed3dc533bfd031dd31a49037646e523ff47f4b1e80744", 0x88, 0x3f}, {&(0x7f0000000340)="3bff85e1cd08897faf0118bfce54aa1385c7e85f6167779084e1be3afd901ad627efc9f04cb0cc8760b7b9b12a816f2978e8a787dd9f0a682e190d53dba1aa14ed313fdf77f12ba53bce1e899163246b11afd0513f718acbde127c78b5d71f2c7f39a97a10d0fdcd17782290f8239ce8e00b969b39f3bc25773f", 0x7a, 0x1}, {&(0x7f00000003c0)="590844ee22506d2dcbefaab2e3b0c7e7d1d82cfac682efa17b7b474be7b798b5ad7e8aad7b77bba0cafdee58b029aa336fb617054cbd5a7ec6c41c9c32cd451a2b891d89e3c8901957478a8c3aa1c84dfce6822b331e9b60f8ed89fddcf7fa0bfe03644e1a1ff44d66599568143b9d4e78e546aa3d066c8ee43c172072b6657e1ab3e0434f53e056ebfdef69ce1e4c511fba52cf301e2da5b75b02aa37facb742f74e2c60b4b77bbdf4aba430cfb3f6bdb4e345eac4fd7f462ba89de3e5d333d278f7c9657d025bf2e6cc5c32843251b29d9a4b2", 0xd4}, {&(0x7f00000004c0)="2cb15c88b18e05fc7fbb8e4d5ac7f07e40763d3fd25c0f75d045f9614dabc3c64e88641fe5549dc6254161a9dd84ece552b067306bbdab04e19c3aba8027b8f92eda7508416b112629a8ed16383df850c9877c6d2e489f77669c9980315d029e878adc042261107badfbed9c070769f7f68e18ead05dc6cbddeb358ace993a64cd9160b8ef6d7207f1ec2c4dc49f00d4736e9a687dcca6ca2b2f5c589fe04b57be4fea37697e556b34f128315aac", 0xae, 0x4}, {&(0x7f0000000580)="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", 0x1000, 0xbb5e}, {&(0x7f0000001580)="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", 0x1000, 0x5}], 0x855, &(0x7f0000002840)={[{@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@nonumtail}, {@numtail}, {@shortname_mixed}, {@shortname_win95}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_user}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@pcr={'pcr', 0x3d, 0x5}}, {@pcr={'pcr', 0x3d, 0x7}}, {@obj_type={'obj_type', 0x3d, '$,'}}, {@fowner_gt={'fowner>', 0xee00}}]}) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r7, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:33:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1739.157177] loop1: detected capacity change from 0 to 40 [ 1739.182653] loop0: detected capacity change from 0 to 40 22:33:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000180)="a5faa6cec2a002081f3b44459498c2268b7f7b9e6fe7b37618c08cba098e3212ff72d38ac282f9cc5a9a9cc7491d0af21ba278a403e97cbb28a7906fd1eba716566c106610dd2e8b71af69", 0x4b) 22:33:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x602103, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)={{0xcc, 0xff, 0x4, 0xa2, 0x11a, 0x5, 0x3c8, 0xffffffff}, "a0ec17ece06f91e4af2ed0aa245c0cd253ceaccbf960bdea86c1199e610ab2dd9eb0a2f3", ['\x00', '\x00']}, 0x244) [ 1739.239671] loop4: detected capacity change from 0 to 40 [ 1739.260391] loop7: detected capacity change from 0 to 40 [ 1739.293564] loop2: detected capacity change from 0 to 40 [ 1739.723601] syz-executor.5: attempt to access beyond end of device [ 1739.723601] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1739.725192] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:33:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x21, r4, r5}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xf720, 0x38}, 0xafb, 0x86e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x9}}, 0xe8) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001240)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/46, 0x2e}, {&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/39, 0x27}], 0xa, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/198, 0xc6}, {&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000ac0)=""/192, 0xc0}, {&(0x7f0000000b80)=""/237, 0xed}, {&(0x7f0000000c80)=""/216, 0xd8}, {&(0x7f0000000d80)=""/47, 0x2f}, {&(0x7f0000000dc0)=""/202, 0xca}], 0x7, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000001140)=""/68, 0x44}], 0x2, &(0x7f0000001200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x3, 0x0, &(0x7f0000001340)={r6, r7+10000000}) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2400, &(0x7f0000001380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@access_any}, {@access_any}], [{@audit}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r8}}, {@dont_measure}, {@measure}, {@audit}]}}) dup(0xffffffffffffffff) 22:33:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/i2c', 0x20041, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) openat(r1, &(0x7f0000000000)='./file1\x00', 0x80800, 0x0) 22:33:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x0, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:23 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001f80)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000340)=""/159, 0x9f}, 0x40005}, {{&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/48, 0x30}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000840)=""/109, 0x6d}, {&(0x7f0000002080)=""/80, 0x50}, {&(0x7f0000000940)=""/15, 0xf}, {&(0x7f0000000980)=""/53, 0x35}], 0x9, &(0x7f0000000a80)=""/37, 0x25}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)}], 0x5}, 0xc5d2}, {{&(0x7f0000001d40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/95, 0x5f}, {&(0x7f0000001e40)=""/21, 0x15}], 0x2, &(0x7f0000001ec0)=""/145, 0x91}, 0x2}], 0x4, 0x10040, &(0x7f00000002c0)={r4, r5+10000000}) r6 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04008000646f7366d8a02b00080101000440002008f801", 0x17, 0x7f}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT=r3, @ANYRES16=r1, @ANYRESDEC=r2]) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r7, &(0x7f0000000300)="8f", 0x1) r8 = open$dir(&(0x7f0000000000)='./file1\x00', 0x44000, 0x3) sendfile(r6, r8, 0x0, 0x7) dup(0xffffffffffffffff) [ 1751.566725] loop2: detected capacity change from 0 to 40 [ 1751.566721] loop3: detected capacity change from 0 to 40 22:33:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:33:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x7, 0x4}, {0x48000, 0x200}]}, 0x14, 0x1) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='\x00', 0x80000000, 0x0, &(0x7f0000000180), 0x80042, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x2d, 0x3a, 0x37, 0x2d]}}}}, {@uid={'uid', 0x3d, 0xee01}}, {@huge_advise}, {@huge_within_size}], [{@smackfsdef={'smackfsdef', 0x3d, 't\xbf'}}]}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) openat(r0, &(0x7f0000000400)='./file0\x00', 0x800, 0x40) accept4$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x0) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f00000002c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 22:33:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r4 = getpid() pidfd_open(r4, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r4) sendfile(r1, r0, 0x0, 0xfffffdef) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r5, &(0x7f0000000140)="a3", 0x1) process_vm_readv(r4, &(0x7f00000002c0), 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/24, 0x18}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/178, 0xb2}], 0x5, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x4008006}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x41040) pidfd_open(0x0, 0x0) creat(&(0x7f0000000380)='./file1\x00', 0x80) [ 1751.615628] loop0: detected capacity change from 0 to 40 [ 1751.625693] loop5: detected capacity change from 0 to 40 [ 1751.636274] loop4: detected capacity change from 0 to 40 22:33:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x21, r4, r5}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xf720, 0x38}, 0xafb, 0x86e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x9}}, 0xe8) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001240)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/46, 0x2e}, {&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/39, 0x27}], 0xa, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/198, 0xc6}, {&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000ac0)=""/192, 0xc0}, {&(0x7f0000000b80)=""/237, 0xed}, {&(0x7f0000000c80)=""/216, 0xd8}, {&(0x7f0000000d80)=""/47, 0x2f}, {&(0x7f0000000dc0)=""/202, 0xca}], 0x7, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000001140)=""/68, 0x44}], 0x2, &(0x7f0000001200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x3, 0x0, &(0x7f0000001340)={r6, r7+10000000}) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2400, &(0x7f0000001380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@access_any}, {@access_any}], [{@audit}, {@fowner_gt={'fowner>', r5}}, {@uid_lt={'uid<', r8}}, {@dont_measure}, {@measure}, {@audit}]}}) 22:33:23 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000240)="096697147a224ae57aea0ab5ec8a29f87d3560df933eaee87a8537580abecc86e2764cb7580a665b9a38c3f1ae3b85f141cdaa77ed3c76748e3c150a782e64d2f8683766889683b798dd31676c69978b8ae3503e36065fceb01fe1e5173a470d1ef0c6a270dae9aec48d51f8b00cf0e511e2beabdec6c3877bef8ff380ae1d6dc62f6d434d77ad2a79be", 0x8a, 0xfffffffffffffffe) write(r1, &(0x7f0000000300)="8f", 0x1) [ 1751.660519] loop7: detected capacity change from 0 to 40 22:33:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1751.727531] loop2: detected capacity change from 0 to 40 [ 1751.729239] loop3: detected capacity change from 0 to 40 [ 1751.792442] loop1: detected capacity change from 0 to 40 [ 1751.796274] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff00000000000000000000006" or missing value 22:33:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:33:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x0, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1751.878580] loop0: detected capacity change from 0 to 40 [ 1751.887705] loop4: detected capacity change from 0 to 40 [ 1751.896731] loop7: detected capacity change from 0 to 40 22:33:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r0, &(0x7f0000000140)="a3", 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x101042, 0x7) write(r2, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:33:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x200000, 0x190) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="000000cea69db88a0cc392c7f741569883f1e37762d4e443a00c2aab3415b94d34d8d8ff5965018408b5bff8d832548d93557b3d69cfc2fe288bfd6a94d51856b822157aa28eb4a9554dfd3b20ebef6daf529403e40ba8ccf16177b77f009d58e948c84c7c67e5185e9d68b5cff8463417def381f096f7ce78e19a3098fbbdd5f5acd63d0f7b38e4623bc87d433df80801b268d4ec038773f5196d9c88fbd907b15fd0d620caa833f858cb8971324e77d51873373f"]) openat(r3, &(0x7f0000000180)='\x00', 0x40800, 0x10) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000000) write(r2, &(0x7f0000000300)="8f", 0x1) [ 1764.351681] loop1: detected capacity change from 0 to 40 [ 1764.366697] loop5: detected capacity change from 0 to 40 22:33:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:33:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x100) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x21, r4, r5}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xf720, 0x38}, 0xafb, 0x86e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x9}}, 0xe8) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001240)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/46, 0x2e}, {&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/39, 0x27}], 0xa, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000900)=""/198, 0xc6}, {&(0x7f0000000a00)=""/143, 0x8f}, {&(0x7f0000000ac0)=""/192, 0xc0}, {&(0x7f0000000b80)=""/237, 0xed}, {&(0x7f0000000c80)=""/216, 0xd8}, {&(0x7f0000000d80)=""/47, 0x2f}, {&(0x7f0000000dc0)=""/202, 0xca}], 0x7, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000001140)=""/68, 0x44}], 0x2, &(0x7f0000001200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x3, 0x0, &(0x7f0000001340)={r6, r7+10000000}) 22:33:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x400000, 0x44) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x80001) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000340)={0x80, 0x10, 0xc}, 0x18) write(r1, &(0x7f0000000140)="a3", 0x1) r3 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x101043, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xde1b3a1030a2fdbb, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000009c0)=0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0xfffe, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x2c}, 0x1, 0x0, 0x0, 0x200480c0}, 0xc804) write(r3, &(0x7f0000000300)="8f", 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000001, 0x4000010, r2, 0x473b6000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'}) syz_mount_image$nfs(&(0x7f0000000380), &(0x7f00000003c0)='./file1/file0\x00', 0x746c, 0xa, &(0x7f0000000800)=[{&(0x7f0000000400)="a6d5e325dbc3e2b9abce07d53f6f1e53976b", 0x12, 0x20}, {&(0x7f0000000440)="dde74f", 0x3, 0x1}, {&(0x7f0000000480)="c00efd7b530f532f7c4c2b258cbf7e42f28e09fdba54121c35107f318995d0363dbc4f249eb3fc0b32ae0e320748277d272799", 0x33, 0x6321}, {&(0x7f00000004c0), 0x0, 0x8000}, {&(0x7f0000000500)="c0c842905f2bcd8a908607ec0ea2577a9e4bf7ec862f94e4b462b17bf6601fa0caacb9b65f03b64f93d71c3b", 0x2c, 0x8}, {&(0x7f0000000540)="87dd435ce65014157779d1e54f", 0xd, 0x400}, {&(0x7f0000000580)="452561809bb527a2e24238f37a38bfc400e3e91dc499eeb4e885841f085ad7ffa4069816283713a01a4ebdd596307b174c17d54a31d3643040b9e247113391aca943144cba761544c6f86b8519dc6b4e65d33c838600cda3ebd2870b75c588b0e78a643baea4f83ebd70c7cfd200b801cf7c4a640a60a646a0fa7938666243322946ce6060531a1a6dd13a9ab4c33b22007977cec9e8569eb1d217555295116287aeb4121b914d99f052b066267c096f111f939e00c84956008b1770d5379e8efd52f6da691d19e4afcc9c350303635933eeaaf6a3359a04effa5d476ffb32b488727db26afa415286b606638c", 0xed, 0xe606661}, {&(0x7f0000000680)="a764c17863d61c504ab0a5797557ed10b4824d5494dae6e2756d2c24913b0616e4f819d8ffe9011e61bb60531ac7e31218f300270f2ecd7e79584129b547f93e60564194b21cbd982a9eed77088f047f7f210a6eb2a4e88165b1de3a40401e0f195454983edff84396a4dc5f75c62c693621dcac4c2958390a659d9b156a1b75079849bd8f207fb7fef2bbd38cd45b3bae6f", 0x92, 0x6}, {&(0x7f0000000740), 0x0, 0x3696}, {&(0x7f0000000780)="731e28bf3414e6a5d4e57a688fc479ec387871d445405a8319f1d1bdb843ea1cee5cd0ed8019ab15a2deaf986496fea7a98e6a5f9cface49eabc4d9630daf229f4814555e73deb654bb651cf146e2be6dd40317071d8971c656605740195e90eacb43c851ddf13d0f6", 0x69, 0x6}], 0x300800e, &(0x7f0000000900)={[{'/dev/zero\x00'}, {}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}, {','}, {'\'!R\\-^*,^]}'}, {'/dev/zero\x00'}, {')'}], [{@obj_user={'obj_user', 0x3d, '/dev/zero\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@hash}, {@dont_appraise}, {@permit_directio}]}) fallocate(r3, 0x21, 0x2, 0x9ba4) 22:33:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x0, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1764.374538] loop2: detected capacity change from 0 to 40 [ 1764.395350] loop7: detected capacity change from 0 to 40 [ 1764.404643] syz-executor.5: attempt to access beyond end of device [ 1764.404643] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1764.405522] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1764.409528] loop4: detected capacity change from 0 to 40 [ 1764.434981] loop3: detected capacity change from 0 to 40 [ 1764.438429] loop0: detected capacity change from 0 to 40 22:33:36 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000001c0)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000340)="c5c1d6ed4fdaaa61b051572c03812e240814d3193ec62bebbf361397e42882b3c070ccde157fabc4f02f9e8db289892bf2198befc71807024ed6b910cfa4a01283dfe04e1e78e2560a2942684ffaa49934e77a3a02f59106062d4dde94b692e2f599d4441f14236262e3fdb0813a7e6d74c03e610431d9399dad031f17d017945288e49beeb8e7e46f13a32fbd6d388b9c7dfd1b6c280d9b6725a25772754c6bd358ba2961a6d37a28c5827632a3d15ee33c23ff0ea391472beace1520f7fe994d016026e6cbc82c4accafa5400fb45ccaca8260570a7f20c983aaf7ea8fd0bdc623a00edade2342db3d437e39df75ac3ed16e632e", 0xf5, 0x8001, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x102410, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRES64=r0, @ANYRESOCT=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2a040, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000040)=""/58) 22:33:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r3, 0x8) openat(r2, &(0x7f0000000000)='./file1\x00', 0x200040, 0x21) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xfffffff9}}, './file0\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000340)=""/199, 0xc7}) [ 1764.499590] loop2: detected capacity change from 0 to 40 22:33:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1764.526222] loop2: detected capacity change from 0 to 40 [ 1764.538090] loop5: detected capacity change from 0 to 40 [ 1764.540843] loop1: detected capacity change from 0 to 40 22:33:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x800410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file1', [{0x20, 'vfat\x00'}], 0xa, "dd2a3c64e6c9af1f40b0dafd1252b34c63efecfbce74ff884e3737aeeedcdaa0c89db5cab84bdc489f8c2be88a86d8bd687d"}, 0x43) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000240)="705c598fe52cbed371f9d29dad31219314be512680a970b1c94ef5ed74c0b000a3c22cbcdb73be7e6c80f83804673561f16d988c4e52594879c6da5b71360ff24d4bcce494c3bab8a9ec2bcb0a89605977d18f7cfb33a415dd39a34800bc4549fb9fe3e56180e37eee7ad66fac1135aee5616800c13e1a8f4334d44fd48150502fb86a97eeb0d2184a6c4ede20f2", 0x8e) write(r1, &(0x7f00000000c0)="9ae7788d75be15", 0x3b) 22:33:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x21, r4, r5}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xf720, 0x38}, 0xafb, 0x86e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x9}}, 0xe8) clock_gettime(0x0, &(0x7f0000001300)) [ 1764.589238] loop7: detected capacity change from 0 to 40 22:33:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) [ 1764.627927] syz-executor.5: attempt to access beyond end of device [ 1764.627927] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1764.629719] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1764.636703] loop2: detected capacity change from 0 to 40 22:33:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1764.669738] syz-executor.5: attempt to access beyond end of device [ 1764.669738] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1764.671651] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1764.674336] loop1: detected capacity change from 0 to 40 [ 1764.692141] loop3: detected capacity change from 0 to 40 [ 1764.733263] loop0: detected capacity change from 0 to 40 [ 1764.756730] loop4: detected capacity change from 0 to 40 22:33:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000240)={{r3}, 0x0, 0x0, @unused=[0x2134, 0xfffffffffffffffd, 0x20, 0x5], @name="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"}) sendfile(r1, r0, 0x0, 0xfffffdef) 22:33:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) 22:33:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:33:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x66a625b2f610795f, 0x4) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) fcntl$setflags(r0, 0x2, 0x0) 22:33:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x21, r4, r5}, {0x6, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xf720, 0x38}, 0xafb, 0x86e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x9}}, 0xe8) 22:33:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff000000002e1e66696c653000"]) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendfile(r3, r4, 0x0, 0x7fffffff) openat(r2, &(0x7f0000000040)='./file1\x00', 0x400000, 0x1d4) write(r1, &(0x7f0000000300)="8f", 0x1) [ 1777.268197] loop3: detected capacity change from 0 to 40 [ 1777.286162] loop2: detected capacity change from 0 to 40 [ 1777.294232] loop4: detected capacity change from 0 to 40 [ 1777.312477] loop1: detected capacity change from 0 to 40 [ 1777.313973] loop5: detected capacity change from 0 to 40 [ 1777.320469] loop0: detected capacity change from 0 to 40 [ 1777.347566] loop7: detected capacity change from 0 to 40 [ 1777.379371] syz-executor.5: attempt to access beyond end of device [ 1777.379371] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1777.380963] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:33:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) 22:33:49 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x5e, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x8201c, &(0x7f0000000340)=ANY=[@ANYBLOB="5c11a11203fa84261ee692357430b73ea40788b59b857a15c681afbf2d4bb90d8862a107408352812f13a9d6785c6f040752fc487367bc02a8acc5eb40f0f1f87417f71620aafe7bb28d6b50a15b70876e1e7d9e5b05623346ab65a63d9b32ee8acc89b04edff09c239a8edfdd208fcbf87d3002eb9a63f056519ff1c9a8ada0059d", @ANYRES32, @ANYRESOCT=r0]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) write(0xffffffffffffffff, &(0x7f0000000300)="8f", 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6, 0x7}}, './file0/file0\x00'}) [ 1777.417341] syz-executor.5: attempt to access beyond end of device [ 1777.417341] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1777.418982] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:33:49 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x8001}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000040)=ANY=[@ANYRES16=r0]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') pread64(r1, &(0x7f0000009780)=""/112, 0x70, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) 22:33:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40040, 0x102) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x80000) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x101200, 0x180) sendfile(r0, r4, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1777.535355] loop3: detected capacity change from 0 to 40 22:33:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1777.594542] FAT-fs (loop5): bogus number of reserved sectors [ 1777.595355] FAT-fs (loop5): Can't find a valid FAT filesystem 22:33:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1777.666462] loop1: detected capacity change from 0 to 128 [ 1777.674189] FAT-fs (loop1): Unrecognized mount option "" or missing value 22:33:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)) [ 1777.697655] loop0: detected capacity change from 0 to 40 [ 1777.716350] loop4: detected capacity change from 0 to 40 [ 1777.811999] loop3: detected capacity change from 0 to 40 [ 1777.839187] loop7: detected capacity change from 0 to 40 22:33:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) [ 1778.018776] loop0: detected capacity change from 0 to 40 [ 1778.059280] loop4: detected capacity change from 0 to 40 22:33:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1778.103696] loop3: detected capacity change from 0 to 40 22:33:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r0, &(0x7f0000000140)="a3", 0x1) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x130) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) 22:33:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:33:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) [ 1778.280535] loop7: detected capacity change from 0 to 40 22:33:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1778.309212] loop2: detected capacity change from 0 to 40 22:33:50 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fallocate(r1, 0x22, 0x0, 0x5e) [ 1778.413418] loop3: detected capacity change from 0 to 40 [ 1778.435369] loop0: detected capacity change from 0 to 40 [ 1778.438639] loop1: detected capacity change from 0 to 128 [ 1778.440309] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 1778.463144] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value 22:33:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x5}, {0x0, 0x0, 0x2800}], 0x1810410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x400, 0x84) [ 1778.499332] loop4: detected capacity change from 0 to 40 [ 1778.615402] loop2: detected capacity change from 0 to 40 [ 1778.619993] FAT-fs (loop2): bogus number of FAT structure [ 1778.620690] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1778.643468] loop2: detected capacity change from 0 to 40 [ 1778.648479] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value 22:34:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) 22:34:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x151042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) setxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f0000000280)='smackfsfloor', 0xc, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/60, 0x3c}, {&(0x7f0000000540)=""/128, 0x80}, {&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/30, 0x1e}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/210, 0xd2}, {&(0x7f0000001800)=""/184, 0xb8}, {&(0x7f00000018c0)=""/112, 0x70}], 0xa, &(0x7f0000001a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000003c40)=[{&(0x7f0000001b40)=""/205, 0xcd}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x3, &(0x7f0000003c80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x2, 0x140, &(0x7f0000003d40)) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@loopback={0x284}, 0x0, r4}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010102, 0x4e22, 0x1, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x21, r4, r5}, {0x5, 0x8000, 0x80000001, 0x2aa, 0x1f8c, 0x8001, 0x1}, {0x1, 0x2, 0xfffffffffffffffd, 0x38}, 0xafb, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x87}, 0x2, @in6=@empty, 0x3501, 0x4, 0x0, 0x80, 0x4, 0x7ff, 0x1}}, 0xe8) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r6, 0x1262, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x180003, &(0x7f00000000c0)={[{}], [{@smackfsfloor={'smackfsfloor', 0x3d, '}+{%\xe8^^'}}, {@euid_lt={'euid<', r5}}]}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={r4, @multicast1, @empty}, 0xc) 22:34:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0}, &(0x7f0000001780)=0xc) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x19a3341d, 0x7, &(0x7f0000001680)=[{&(0x7f00000002c0), 0x0, 0x5}, {&(0x7f0000000300)="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", 0x1000, 0x8}, {&(0x7f0000001300)="ba6fa9299aa5a1f78c3e85", 0xb, 0x2}, {&(0x7f0000001340)="763c797f3b3f65ba854859ec0bcdc823e771c36689509bb9aa684611667d6ec47ffde8c0e1bb7993f6038f1ea19797e994eb849df25cc7efa39e7dc256e6e65077f8c944eabb5277145f77bc7ac83899c3674f1819aa", 0x56, 0xffff}, {&(0x7f00000013c0)="f3b5c278b87b559e06b51accd4bda20066b24e4cdde7613b1e7f73e1c5bd6347c0882a105c6fa4693062527f201fbd7fd2f9d7f15e5d2924f5c8392e4598e9ef49308d3f0778507a33b26ae2520c5bbbf81252d261dba6de66ccc9dfe4700b447e10ac815780f116f4ec24340b27f025c3a4a6f0f973bcc8179ca4cc77114ff9a719447255437bd21a44ea545bf250a74a95168b1fcb986c616d5a73c6ff4b4d2fd7f4d244fdea8dd8401a6bce03bb9f9bf53453c23022ad1f3e1bc755df07406f0bcf5ddc14417dfaaa5dce99e49a61efe8a2dcf6616ff2f72e76297d0a", 0xde, 0x100}, {&(0x7f00000014c0)="672562c0863ac3579ec8fea3bdaa6665767da59345723ca6da3838d88b7fac2029e50ed7c14ec9806cd89f3f90fdb0452335d63c84e7e4a2dcedb1a656c0018213e35d85bf66e74eaecc60dcc70b33b1add38a75f488d8694d73c10303e8fad5830e8e2c43c015fdd73e648dfb1bc1afe3c4631ed6213aa98dc7cbbfd7d949d5e9564c84eda707165392ed6fdc2a0ee221a93fe1d3da36cb92e270a814", 0x9d, 0x1}, {&(0x7f0000001580)="999fef66aaf1507a51eaaa6ca4106a09bbeb3a0529c64456255527f8adb6b3be2f210848710bc2f81f958ba7ba07c757c1191c915bd199978143878044be1facdcf00b590573bddcc3a80e91b943672ee5204b33e245ab18f770ffaeb4ef203189c492b32bb234fd1049dbed544fecfff053ae15057722f9e9cc20fbc5fe7f503f05c9c1a9fc3e14cf48dad44e55e927cc3744ebd588ff72b92ad91a38655a267f7c8c70d93644491cc972b682da48154dce9f25c42921b1c78629c13202316f51100211da101b1c93315ec4836535fd14f4f18d01dd45777160b699de2ff293c43b0f4016179cbe3a85f3", 0xeb, 0x3}], 0x210004, &(0x7f00000017c0)={[{@utf8}, {@map_normal}], [{@euid_eq={'euid', 0x3d, r5}}, {@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4200, 0xe6) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r0, 0x0, 0xfffffdef) 22:34:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000200)="8f", 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7fff}}, './file0\x00'}) renameat2(r0, &(0x7f0000000240)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x7) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={{r3, r4/1000+10000}, {0x0, 0x2710}}) lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='user.incfs.metadata\x00') 22:34:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1793.925576] loop3: detected capacity change from 0 to 40 [ 1793.927243] loop5: detected capacity change from 0 to 40 [ 1793.932337] loop4: detected capacity change from 0 to 40 [ 1793.939592] FAT-fs (loop2): bogus number of reserved sectors [ 1793.940517] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1793.959512] loop7: detected capacity change from 0 to 40 [ 1793.962386] loop0: detected capacity change from 0 to 40 [ 1793.971341] FAT-fs (loop2): Unrecognized mount option "/file0" or missing value [ 1794.024082] syz-executor.5: attempt to access beyond end of device [ 1794.024082] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1794.026048] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:34:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:34:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) 22:34:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1806.807666] loop3: detected capacity change from 0 to 40 [ 1806.810006] loop5: detected capacity change from 0 to 40 22:34:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x428001, 0x0) 22:34:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) r4 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file1', [{0x20, 'vfat\x00'}, {0x20, ')-'}, {0x20, ',('}, {0x20, '('}, {0x20, 'vfat\x00'}, {0x20, '(\':'}, {0x20, '.\'&+'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, ')-['}], 0xa, "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"}, 0x136) sendfile(r3, r2, 0x0, 0xfffffdef) bind$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:18 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x0, &(0x7f0000000200), 0x410, &(0x7f0000000140)=ANY=[]) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x6000, 0x1) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) futimesat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000540)={{}, {r1, r2/1000+60000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x100010, r3, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380), 0x16000, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x7, 0x40081) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) syz_io_uring_setup(0x101, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000040)=0x0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r8, &(0x7f0000000140)="a3", 0x1) getdents(r8, &(0x7f0000000280)=""/90, 0x5a) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380), 0x16000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x8, 0xffff, 0x0, 0xfffff689, 0x4, 0x1}, 0x4ab1) syz_io_uring_submit(r4, r7, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x2) 22:34:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0xe, 0x4, &(0x7f0000000580)=[{&(0x7f00000003c0)="2f5972334263c9fd56660c71f88d39248d7da0899c36f9b256a9ab1ae3586f10d167d4c941dc53addcd2db9fb7e6534602ca5528d0b105e8ed82e2e8bb473dfbe00f412a32a783842fe6f43117d7b91bea8102c97a2a0ae91e6f12c163ed918242090adf40b4f5195b679d218660b22bfae4d7518ade0672ad0a014c5509132a6d74dfb192eb", 0x86, 0xe7}, {&(0x7f0000000480)="35c5742a1f0884388e9a8c17fc55388db155fbd96a047ae6fe6bd51d1c416e6d1f299047d719d127c0050c51687c748eec982f6598f0599bfcd3b20e2b86ed727f6e71c285d0a2f15cbd", 0x4a, 0x4}, {&(0x7f0000000500)="211e005be3", 0x5, 0x1}, {&(0x7f0000000540)="62546c5b8f672e30", 0x8, 0x9}], 0x400, &(0x7f0000000740)=ANY=[@ANYBLOB="6e725f626c6f636b733d783925742c6e725f696e6f6465733d322c7375626a5f726f6c653d7b2c7375626a5f757365723d747275737465642e6f7665726c61792e6f7061717565002c737562625f726f6c653d7d287d2c736d61636b66736465663d2d252f5d5d257b2c008a5cfda1e0542a76fb3eedd4d04358c705ecd07fdd8c20552d7c92fcc926e2e0c675b076c7c811aab9b6af31914053c81a1b3e55b834ce316c03e519d7055a6628cfe4fc79b8b90ee74263993218fcbb4e05d28a32edcbd4e3b472061b073f13048ec02d4dfc9a0e669305"]) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)=""/186, 0xba) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$security_capability(&(0x7f0000000680)='./file2\x00', &(0x7f00000006c0), &(0x7f0000000700)=@v3={0x3000000, [{0x3, 0x7}, {0x5, 0xd5d}], 0xee00}, 0x18, 0x3) write(r0, &(0x7f0000000300)="8f", 0x1) openat(r0, &(0x7f0000000000)='./file1\x00', 0x903c0, 0x24) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x400, 0x1e800) openat(r1, &(0x7f00000000c0)='./file2\x00', 0x0, 0x4) [ 1806.848500] loop4: detected capacity change from 0 to 40 22:34:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_confh={0x10, 0x2, {0x28}}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) [ 1806.863078] loop2: detected capacity change from 0 to 40 [ 1806.870371] loop7: detected capacity change from 0 to 40 22:34:18 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000000)='./file1\x00', 0x20101, 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) [ 1806.878567] FAT-fs (loop1): bogus number of reserved sectors [ 1806.879392] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1806.879719] loop0: detected capacity change from 0 to 40 [ 1806.911276] syz-executor.5: attempt to access beyond end of device [ 1806.911276] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1806.913188] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1806.916140] loop3: detected capacity change from 0 to 40 [ 1806.945241] FAT-fs (loop1): Unrecognized mount option "" or missing value 22:34:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) 22:34:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:19 executing program 2: pwrite64(0xffffffffffffffff, &(0x7f0000000000)="6f1b65b6ae794784ecb506708545d789090c53f0ba38bd45a78f264f6a2dd750d1aecfaaf5d7d0248af08f68f7ef90e89e93838951663fd27d51e18feea1ebeac6dcd749cf4128024fd43a116787964a15f119f49caf9e7694d52bd664d9aa135442f87b815f82764debc9dcb0c0d578cd5d532f", 0x74, 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) chroot(&(0x7f00000000c0)='./file0\x00') connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) [ 1807.010133] loop3: detected capacity change from 0 to 40 [ 1807.038342] loop0: detected capacity change from 0 to 40 [ 1807.088316] loop2: detected capacity change from 0 to 40 22:34:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) 22:34:32 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat2(r0, &(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x400000, 0x20, 0xd}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000300)="8f", 0x1) 22:34:32 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x34) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = signalfd(r0, &(0x7f0000000040)={[0xc]}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaf1}}, './file0\x00'}) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r2, r1, 0x0, 0xfffffdef) 22:34:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:32 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r0, &(0x7f0000000140)="a3", 0x1) fspick(r0, &(0x7f00000001c0)='./file1\x00', 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x1007458, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)) fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20) write(r1, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x220000, 0x183) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0xfffffffe, 0x4) 22:34:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:34:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x244101, 0x0) open_tree(r1, &(0x7f0000000240)='./file1\x00', 0x1800) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x8, 0x1) write(r2, &(0x7f0000000300)="8f", 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) openat(r3, &(0x7f0000000040)='./file1\x00', 0x101181, 0x0) 22:34:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1820.538326] loop5: detected capacity change from 0 to 40 [ 1820.543033] loop3: detected capacity change from 0 to 40 [ 1820.555487] loop2: detected capacity change from 0 to 40 [ 1820.574403] loop1: detected capacity change from 0 to 40 [ 1820.575040] loop4: detected capacity change from 0 to 40 [ 1820.580564] loop0: detected capacity change from 0 to 40 [ 1820.587754] loop7: detected capacity change from 0 to 40 [ 1820.606365] syz-executor.5: attempt to access beyond end of device [ 1820.606365] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1820.607322] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:34:32 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) [ 1820.625270] loop1: detected capacity change from 0 to 40 22:34:32 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x8, 0x0, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x418, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="7a22aef2d873f5b0f3ac5c46070d93b9390a12fb54876c2fed327ac90e1a8eaeb0ad397f28de743fe94e23bb230b21a7e8cdc4bd16b950f21d040c9426ee73824b22f7a3e1d23e90e9badb743b77c415a78626681d51420d7eb40d52d6016d96953e335b6519752ff343729d4e296d42613b8d08f6184b16", @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="6c14727f4db3aa3c510f69fa193c0eadb39f8b0e095c2084d9118cfbffa7d191de6cef0416c83da7e9ec37d15b53ac981d59a8d19fd7f21dcdcfc50a8a6c974879ad2219f30920b7ce16dbd337194f886ba466378776f3685a98a0e5727634e4543ab41f39b57aaaaa84fa6b5ab38caf02452b9728b3cfb22cd41b2b758db4a459c0d1e022735670031f7525f63cc6dd1794f24d5a14e5967bcb101a0fc6cb811055631531b119d9b85ea0735fdb2efc1d5033ad668dad441d5b675f2762b0b664a629798953c7c4399d7054ceac2ce3037672f253af5d4bd6bda0d95899e0", @ANYRESHEX, @ANYRES16]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r2, &(0x7f0000000300)="8f", 0x1) 22:34:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) 22:34:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x8) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000000fffffdf0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1820.769215] loop3: detected capacity change from 0 to 40 [ 1820.775373] loop4: detected capacity change from 0 to 40 [ 1820.777413] loop7: detected capacity change from 0 to 40 [ 1820.781774] loop5: detected capacity change from 0 to 40 22:34:32 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = dup(r0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x443, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r3, &(0x7f00000000c0)="0a4240c06245f1921953f300", 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast2, 0x1f}, 0x1c) dup(0xffffffffffffffff) 22:34:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) 22:34:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:32 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366f8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10042, 0x10) write(r1, &(0x7f0000000300)="8f", 0x1) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="b54da9abf5c62fd27405a2ffdfd552d6cb37273bf1548459ee11aad9d42c1e09e98e25fa6cf84e4bb09841a80bd64916e9e5ec8e3092dec1a11333fc9b69abb65c5d317fd6eae2fb9d71bd76aff0348adfda47d5a1529b31107df4ffb7f829a0d084b9e39669c2547acccb9decd8caa41d226f2cf7a889ea2c46bb010872786c0c4b53544b274e", 0x87}, {&(0x7f0000000000)="8a42d8a16abaa20f78f7", 0xa}], 0x2, 0x1ff, 0x6a) [ 1820.801632] loop0: detected capacity change from 0 to 40 [ 1820.811752] loop1: detected capacity change from 0 to 40 22:34:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) [ 1820.845755] FAT-fs (loop2): Unrecognized mount option "z"s\F9 [ 1820.845755] Tl/2z9(t?N## !ĽP &sK">t;w&hQB~Rm>3[eu/CrN)mBa;K|<^rnl++" or missing value [ 1820.882957] syz-executor.5: attempt to access beyond end of device [ 1820.882957] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1820.884975] Buffer I/O error on dev loop5, logical block 10, lost async page write [ 1820.912808] loop3: detected capacity change from 0 to 40 [ 1821.565966] FAT-fs (loop2): Unrecognized mount option "z"s\F9 [ 1821.565966] Tl/2z9(t?N## !ĽP &sK">t;w&hQB~Rm>3[eu/CrN)mBa;K|<^rnl++" or missing value 22:34:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x18000, 0x2f) write(r0, &(0x7f0000000000)="c09d5ea3f00656b214d014426f58808f", 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x101) dup(0xffffffffffffffff) 22:34:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r2, &(0x7f0000000140)="a3", 0x1) r3 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getegid() fchown(r4, 0x0, r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x0, r5}}, './file0\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x82) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x125200, 0x41) sendfile(r7, r6, 0x0, 0xfffffdef) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) 22:34:44 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x404, 0x0) clock_gettime(0x0, &(0x7f0000001c80)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000001c40)=[{{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/95, 0x5f}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/55, 0x37}, {&(0x7f0000001a80)=""/65, 0x41}, {&(0x7f0000001b00)=""/17, 0x11}], 0x9, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}], 0x1, 0x10041, &(0x7f0000001cc0)={r3, r4+10000000}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001d00)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001e00)=0xe8) mount$9p_fd(0x0, &(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x2000000, &(0x7f0000001e40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@access_uid={'access', 0x3d, r5}}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x0, 0x35, 0x39, 0x64, 0x0, 0x36, 0x30], 0x2d, [0x38, 0x32, 0x37, 0x30], 0x2d, [0x33, 0x34, 0x36, 0x57], 0x2d, [0x35, 0x61, 0x39, 0x66], 0x2d, [0x39, 0x38, 0x64, 0x34, 0x3f, 0x65, 0x30, 0x30]}}}, {@obj_user}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, ')\xf4-'}}, {@smackfsdef={'smackfsdef', 0x3d, 'freezer.parent_freezing\x00'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '@\xbf].{V'}}, {@uid_gt={'uid>', r6}}]}}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0x61, &(0x7f0000000180)="a01f68975301a2b46b14fff94bb8aaf4c4ae878d4f8cba91f97ae6e03941d3ead07e594e6ba363fdabe4236fdaaa01b7f84bbc7390900d4e1c7f2ecf9a90d30aa6632f93a344a26dccd70120a8f9a7e54938d5c9b2272e145e2dd6de2cd6670969", 0x73, 0x0, &(0x7f0000000240)="ec9892db1e8627d9f4e287026625e4f77bf56fd0b00d5e7e8e226c2eb3cfc3ac14d1ab283f70cbe4f89d35d6cec834adc7873bc86121f2bd19adf41ebf5884756c0bc1efb7158edf3f56c7dbb520ea7bdeef9704c95b5602168f42c360f1ee1a3be98eac451191696e54cef204b42cd53e514e"}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r7, &(0x7f0000000140)="a3", 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) fallocate(r1, 0x20, 0x0, 0x0) sendfile(r1, r8, &(0x7f0000000500)=0x6, 0x100000000) r9 = openat$cgroup_ro(r1, &(0x7f0000000440)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000000480)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', r0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000400)=ANY=[@ANYBLOB='trCans=unix,cacie=mmap,appraise,measure,subj_role=,']) write(r1, &(0x7f0000000300)="8f", 0x1) 22:34:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) 22:34:44 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f00000000c0)='./file2\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file2\x00', 0xffffffffffffff9c) write(r1, &(0x7f0000000300)="8f", 0x1) openat(r0, &(0x7f0000000180)='./file2\x00', 0x301100, 0x100) 22:34:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1832.911410] loop1: detected capacity change from 0 to 40 [ 1832.911421] loop3: detected capacity change from 0 to 40 [ 1832.916716] loop4: detected capacity change from 0 to 40 [ 1832.920543] loop0: detected capacity change from 0 to 40 [ 1832.924447] loop2: detected capacity change from 0 to 40 [ 1832.935849] loop5: detected capacity change from 0 to 40 [ 1832.942429] loop7: detected capacity change from 0 to 40 22:34:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') write(0xffffffffffffffff, &(0x7f0000000300)="8f", 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) 22:34:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000300)="8f", 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x804) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x8, 0x0) dup(0xffffffffffffffff) 22:34:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r3, &(0x7f0000000140)="a3", 0x1) readlinkat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) 22:34:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x113000, 0x11) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) r2 = memfd_secret(0x80000) openat(r2, &(0x7f00000000c0)='./file2\x00', 0x200c2, 0x71) write(r0, &(0x7f0000000300)="8f", 0x1) [ 1833.032541] loop3: detected capacity change from 0 to 40 [ 1833.037614] syz-executor.5: attempt to access beyond end of device [ 1833.037614] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1833.038657] Buffer I/O error on dev loop5, logical block 10, lost async page write 22:34:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000009780)=""/112, 0x70, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(r1, &(0x7f0000000140)="a3", 0x1) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=""/112, 0x70) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x80002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) syncfs(r2) [ 1833.046471] loop1: detected capacity change from 0 to 40 [ 1833.051482] loop0: detected capacity change from 0 to 40 [ 1833.068238] loop4: detected capacity change from 0 to 40 22:34:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f0000000140)='./file0\x00') write(0xffffffffffffffff, &(0x7f0000000300)="8f", 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000005c0)={0x4, 0x17e0000000000000, 0x80000001}) [ 1833.090054] loop2: detected capacity change from 0 to 40 [ 1833.099329] loop7: detected capacity change from 0 to 40 22:34:45 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r1, &(0x7f0000000300)="8f", 0x1) dup(0xffffffffffffffff) openat(r0, &(0x7f0000000000)='./file1\x00', 0x400000, 0xaf) 22:34:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000000c0)=0xfff, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x20001, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="a3", 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x5, 0x40, 0x2, 0xff, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @perf_config_ext={0x7, 0x400}, 0x820b, 0x9, 0xdd5, 0x6, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="2300000075000000000000000000007f7824c04489424bd89776f117431ec67114b1d912ce63efe328fec0a62963508ba7cc8ccf85623ebf14f21b7270804ce3c3f9771290df80118f44e041ed6c33de8f20c977f82b84330f43952cbb6e087a5672dfc1c91d2d3187799be1b2"]}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x47}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000004) memfd_secret(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x40) [ 1833.137750] loop3: detected capacity change from 0 to 40 [ 1833.170840] loop1: detected capacity change from 0 to 40 [ 1833.180263] loop0: detected capacity change from 0 to 40 [ 1833.781114] syz-executor.5: attempt to access beyond end of device [ 1833.781114] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 1833.782707] Buffer I/O error on dev loop5, logical block 10, lost async page write VM DIAGNOSIS: 22:39:47 Registers: info registers vcpu 0 RAX=00000000005f1ecd RBX=0000000000000000 RCX=ffffffff844d18be RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81287c55 RBP=dffffc0000000000 RSP=ffffffff85407e10 R8 =0000000000000001 R9 =ffffed100d9c69f8 R10=ffff88806ce34fc3 R11=0000000000000001 R12=ffffffff85d35c50 R13=1ffffffff0a80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844d284f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4e8d816000 CR3=0000000016076000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041842c43c0000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000981c33 RBX=0000000000000001 RCX=ffffffff844d18be RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff81287c55 RBP=dffffc0000000000 RSP=ffff888008dd7e70 R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001 R12=ffffffff85d35c50 R13=1ffff110011bafd3 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844d284f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4e8d8fa000 CR3=0000000016076000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=002b02fe016c6c6f502e726567616e61 XMM02=006e65672063657865080a0100010101 XMM03=636578650e007a7a7566206365786509 XMM04=636578650b006574616469646e616320 XMM05=6f7420636578650a0065676169727420 XMM06=657220726f74756365786511006c6174 XMM07=6e696d20636578650d00737472617473 XMM08=007a7a7566206365786509006e656720 XMM09=006574616469646e616320636578650e XMM10=78650a0065676169727420636578650b XMM11=74756365786511006c61746f74206365 XMM12=6578650d00737472617473657220726f XMM13=636578650a00657a696d696e696d2063 XMM14=6e696820636578650a006873616d7320 XMM15=0000736465657320636578650a007374