80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 456.901079] loop6: detected capacity change from 0 to 40 01:54:14 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x57, 0x290c81) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x6, 0x4) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) [ 456.943151] Bluetooth: hci0: unexpected event 0x0b length: 4 < 11 01:54:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:54:27 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:27 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:27 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040b04"], 0x7) 01:54:27 executing program 6: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:54:27 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x57, 0x290c81) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x6, 0x4) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) 01:54:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 469.714058] loop6: detected capacity change from 0 to 40 [ 469.736700] Bluetooth: hci0: unexpected event 0x0b length: 4 < 11 01:54:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040b04"], 0x7) 01:54:27 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:54:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, 0x0, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:54:27 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:27 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x57, 0x290c81) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x6, 0x4) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) [ 470.239353] Bluetooth: hci0: unexpected event 0x0b length: 4 < 11 [ 470.507469] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 470.578900] loop6: detected capacity change from 0 to 40 01:54:40 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, 0x0, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:54:40 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:54:40 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:40 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040b04"], 0x7) 01:54:40 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:40 executing program 4: syz_open_dev$vcsu(&(0x7f0000000080), 0x57, 0x290c81) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 482.697008] loop6: detected capacity change from 0 to 40 [ 482.706460] Bluetooth: hci0: unexpected event 0x0b length: 4 < 11 [ 482.724211] loop4: detected capacity change from 0 to 39 01:54:40 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:40 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, 0x0, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 482.806598] kworker/u4:4: attempt to access beyond end of device [ 482.806598] loop4: rw=1, sector=44, nr_sectors = 80 limit=39 [ 482.807842] kworker/u4:4: attempt to access beyond end of device [ 482.807842] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 482.808864] Buffer I/O error on dev loop4, logical block 31, lost async page write 01:54:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:54:40 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:40 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:40 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:54:40 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 482.863900] loop6: detected capacity change from 0 to 40 [ 482.878028] loop4: detected capacity change from 0 to 39 01:54:40 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 482.937796] kworker/u4:4: attempt to access beyond end of device [ 482.937796] loop4: rw=1, sector=44, nr_sectors = 80 limit=39 [ 482.940959] kworker/u4:4: attempt to access beyond end of device [ 482.940959] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 482.942032] Buffer I/O error on dev loop4, logical block 31, lost async page write 01:54:52 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:52 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:54:52 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:52 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:54:52 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:54:52 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:52 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 494.843185] loop4: detected capacity change from 0 to 39 01:54:52 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:54:52 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:52 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:54:52 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:54:52 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 494.987685] loop4: detected capacity change from 0 to 39 01:54:52 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:54:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:05 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:05 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:05 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:55:05 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:55:05 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:55:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:55:05 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 508.280187] loop4: detected capacity change from 0 to 39 01:55:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:55:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:05 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:55:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 508.447964] syz-executor.6: attempt to access beyond end of device [ 508.447964] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 508.451479] FAT-fs (loop6): unable to read boot sector 01:55:19 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:55:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 01:55:19 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:55:19 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 521.905964] syz-executor.6: attempt to access beyond end of device [ 521.905964] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 521.909186] FAT-fs (loop6): unable to read boot sector [ 521.934242] loop4: detected capacity change from 0 to 39 01:55:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 01:55:19 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:55:19 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 522.036621] syz-executor.6: attempt to access beyond end of device [ 522.036621] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 01:55:19 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 522.044548] FAT-fs (loop6): unable to read boot sector 01:55:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x20, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 01:55:19 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:55:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:55:19 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x20, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) [ 522.172571] syz-executor.6: attempt to access beyond end of device [ 522.172571] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 522.177072] loop4: detected capacity change from 0 to 39 [ 522.177303] FAT-fs (loop6): unable to read boot sector 01:55:19 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:19 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:55:33 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:55:33 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x20, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) [ 535.678148] loop4: detected capacity change from 0 to 39 [ 535.721194] syz-executor.6: attempt to access beyond end of device [ 535.721194] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 535.732741] FAT-fs (loop6): unable to read boot sector 01:55:33 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:55:44 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:55:44 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:55:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}}, 0x0) 01:55:44 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 547.297890] syz-executor.6: attempt to access beyond end of device [ 547.297890] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 01:55:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 547.305730] FAT-fs (loop6): unable to read boot sector 01:55:44 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}}, 0x0) 01:55:57 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:55:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}}, 0x0) 01:55:57 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:55:57 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:57 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:55:57 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) [ 560.125847] loop6: detected capacity change from 0 to 40 [ 560.134447] FAT-fs (loop6): bogus number of reserved sectors [ 560.134859] FAT-fs (loop6): Can't find a valid FAT filesystem 01:55:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 560.167734] syz-executor.4: attempt to access beyond end of device [ 560.167734] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 560.175277] FAT-fs (loop4): unable to read boot sector [ 560.206894] loop6: detected capacity change from 0 to 40 01:55:57 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 560.211995] FAT-fs (loop6): bogus number of reserved sectors [ 560.213430] FAT-fs (loop6): Can't find a valid FAT filesystem 01:55:57 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:56:10 executing program 3: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 572.779805] syz-executor.4: attempt to access beyond end of device [ 572.779805] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 572.786495] loop6: detected capacity change from 0 to 40 [ 572.791644] FAT-fs (loop4): unable to read boot sector [ 572.800415] FAT-fs (loop6): bogus number of reserved sectors [ 572.801168] FAT-fs (loop6): Can't find a valid FAT filesystem 01:56:10 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:56:10 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 3: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, 0xffffffffffffffff, 0x16038000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:10 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 1) 01:56:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:56:10 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 573.104757] loop6: detected capacity change from 0 to 40 01:56:10 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 573.124194] FAT-fs (loop6): bogus number of reserved sectors [ 573.125213] FAT-fs (loop6): Can't find a valid FAT filesystem [ 573.139525] syz-executor.4: attempt to access beyond end of device [ 573.139525] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 573.147326] FAT-fs (loop4): unable to read boot sector 01:56:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 1) 01:56:23 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:56:23 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:56:23 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 2) 01:56:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:23 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:23 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 586.432609] FAULT_INJECTION: forcing a failure. [ 586.432609] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 586.433456] CPU: 0 PID: 5421 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230721 #1 [ 586.433991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 586.434523] Call Trace: [ 586.434701] [ 586.434857] dump_stack_lvl+0xc1/0xf0 [ 586.435127] should_fail_ex+0x4b4/0x5b0 [ 586.435407] _copy_from_user+0x30/0xf0 [ 586.435676] copy_msghdr_from_user+0x89/0x150 [ 586.435981] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 586.436322] ? __pfx___lock_acquire+0x10/0x10 [ 586.436629] ? lock_acquire+0x19a/0x4c0 [ 586.436904] ? find_held_lock+0x2c/0x110 [ 586.437189] ? get_pid_task+0xec/0x250 [ 586.437463] ___sys_sendmsg+0xdd/0x1b0 [ 586.437770] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.438102] ? __fget_files+0x245/0x480 [ 586.438404] ? lock_release+0x1e3/0x680 [ 586.438695] ? __pfx_lock_release+0x10/0x10 [ 586.439014] ? lock_release+0x1e3/0x680 [ 586.439314] ? __fget_files+0x267/0x480 [ 586.439615] ? __fget_light+0xe5/0x270 [ 586.439917] __sys_sendmsg+0xf7/0x1d0 [ 586.440200] ? __pfx___sys_sendmsg+0x10/0x10 [ 586.440517] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 586.440937] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 586.441353] ? fput+0x2f/0x1a0 [ 586.441602] ? ksys_write+0x19e/0x250 [ 586.441881] ? __pfx_ksys_write+0x10/0x10 [ 586.442178] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 586.442556] ? syscall_enter_from_user_mode+0x21/0x50 [ 586.442925] do_syscall_64+0x3f/0x90 [ 586.443189] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 586.443562] RIP: 0033:0x7f40c9960b19 [ 586.443826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 586.445043] RSP: 002b:00007f40c6ed6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.445573] RAX: ffffffffffffffda RBX: 00007f40c9a73f60 RCX: 00007f40c9960b19 [ 586.446062] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 586.446550] RBP: 00007f40c6ed61d0 R08: 0000000000000000 R09: 0000000000000000 [ 586.447027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.447514] R13: 00007ffef9c71f0f R14: 00007f40c6ed6300 R15: 0000000000022000 [ 586.448019] 01:56:24 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) [ 586.498408] loop6: detected capacity change from 0 to 40 [ 586.502909] syz-executor.4: attempt to access beyond end of device [ 586.502909] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 586.508107] FAT-fs (loop6): bogus number of reserved sectors [ 586.508970] FAT-fs (loop6): Can't find a valid FAT filesystem [ 586.511060] FAT-fs (loop4): unable to read boot sector 01:56:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 2) 01:56:24 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 3) 01:56:24 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 586.565513] FAULT_INJECTION: forcing a failure. [ 586.565513] name failslab, interval 1, probability 0, space 0, times 0 [ 586.566305] CPU: 0 PID: 5438 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230721 #1 [ 586.566828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 586.567356] Call Trace: [ 586.567540] [ 586.567697] dump_stack_lvl+0xc1/0xf0 [ 586.567971] should_fail_ex+0x4b4/0x5b0 [ 586.568246] ? __alloc_skb+0x28c/0x330 [ 586.568526] should_failslab+0x9/0x20 [ 586.568790] kmem_cache_alloc_node+0x65/0x3b0 [ 586.569101] __alloc_skb+0x28c/0x330 [ 586.569357] ? __pfx___alloc_skb+0x10/0x10 [ 586.569655] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 586.569997] netlink_sendmsg+0x9ac/0xe40 [ 586.570288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.570594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.570913] sock_sendmsg+0x1b6/0x200 [ 586.571170] ____sys_sendmsg+0x76a/0x9a0 [ 586.571456] ? copy_msghdr_from_user+0xfc/0x150 [ 586.571753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.572074] ? find_held_lock+0x2c/0x110 [ 586.572347] ? get_pid_task+0xec/0x250 [ 586.572621] ___sys_sendmsg+0x110/0x1b0 [ 586.572878] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.573188] ? __fget_files+0x245/0x480 [ 586.573455] ? __pfx_lock_release+0x10/0x10 [ 586.573776] ? lock_release+0x1e3/0x680 [ 586.574052] ? __fget_files+0x267/0x480 [ 586.574334] ? __fget_light+0xe5/0x270 [ 586.574617] __sys_sendmsg+0xf7/0x1d0 [ 586.574879] ? __pfx___sys_sendmsg+0x10/0x10 [ 586.575191] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 586.575545] ? syscall_enter_from_user_mode+0x21/0x50 [ 586.575907] do_syscall_64+0x3f/0x90 [ 586.576183] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 586.576515] RIP: 0033:0x7f40c9960b19 [ 586.576760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 586.577988] RSP: 002b:00007f40c6ed6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.578515] RAX: ffffffffffffffda RBX: 00007f40c9a73f60 RCX: 00007f40c9960b19 [ 586.579004] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 586.579497] RBP: 00007f40c6ed61d0 R08: 0000000000000000 R09: 0000000000000000 [ 586.579981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.580468] R13: 00007ffef9c71f0f R14: 00007f40c6ed6300 R15: 0000000000022000 [ 586.580971] 01:56:24 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:56:24 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:56:24 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:56:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 3) [ 586.668191] FAULT_INJECTION: forcing a failure. [ 586.668191] name failslab, interval 1, probability 0, space 0, times 0 [ 586.669158] CPU: 0 PID: 5446 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 586.669706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 586.670232] Call Trace: [ 586.670412] [ 586.670572] dump_stack_lvl+0xc1/0xf0 [ 586.670836] should_fail_ex+0x4b4/0x5b0 [ 586.671113] ? vm_area_dup+0x20/0x160 [ 586.671391] should_failslab+0x9/0x20 [ 586.671656] kmem_cache_alloc+0x61/0x390 [ 586.671943] ? mas_destroy+0x216/0x8c0 [ 586.672217] vm_area_dup+0x20/0x160 [ 586.672472] __split_vma+0x173/0x770 [ 586.672732] ? __pfx___split_vma+0x10/0x10 [ 586.673022] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 586.673398] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 586.673806] ? mtree_range_walk+0x5c7/0x910 [ 586.674118] ? mas_walk+0x5c6/0x7c0 [ 586.674383] do_vmi_munmap+0x1e7/0x430 [ 586.674649] do_munmap+0xb1/0xf0 [ 586.674893] ? __pfx_do_munmap+0x10/0x10 [ 586.675194] ? rcu_read_lock_any_held+0x79/0xa0 [ 586.675548] ? vfs_write+0x155/0xda0 [ 586.675797] __do_sys_mremap+0x1326/0x1650 [ 586.676109] ? __pfx___do_sys_mremap+0x10/0x10 [ 586.676446] ? perf_trace_preemptirq_template+0x252/0x420 [ 586.676857] ? fput+0x2f/0x1a0 [ 586.677103] ? __pfx_ksys_write+0x10/0x10 [ 586.677373] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 586.677765] do_syscall_64+0x3f/0x90 [ 586.678043] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 586.678420] RIP: 0033:0x7f8595db6b19 [ 586.678688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 586.679920] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 586.680460] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 586.680954] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 586.681458] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 586.681974] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 586.682477] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 586.682999] 01:56:24 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) [ 586.700993] loop6: detected capacity change from 0 to 40 01:56:24 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 586.711720] FAT-fs (loop6): bogus number of reserved sectors [ 586.712603] FAT-fs (loop6): Can't find a valid FAT filesystem [ 586.715985] syz-executor.4: attempt to access beyond end of device [ 586.715985] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 586.719690] FAT-fs (loop4): unable to read boot sector 01:56:24 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:24 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:56:24 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:24 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:36 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 4) 01:56:36 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 1) 01:56:36 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:36 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:56:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 4) 01:56:36 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:56:36 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:56:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 5) 01:56:36 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 599.394653] loop6: detected capacity change from 0 to 40 [ 599.402485] syz-executor.4: attempt to access beyond end of device [ 599.402485] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 599.410306] FAT-fs (loop4): unable to read boot sector [ 599.412312] FAT-fs (loop6): bogus number of reserved sectors [ 599.412724] FAT-fs (loop6): Can't find a valid FAT filesystem 01:56:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 6) 01:56:37 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 599.485814] FAULT_INJECTION: forcing a failure. [ 599.485814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.486651] CPU: 0 PID: 5490 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230721 #1 [ 599.487182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 599.487705] Call Trace: [ 599.487881] [ 599.488037] dump_stack_lvl+0xc1/0xf0 [ 599.488307] should_fail_ex+0x4b4/0x5b0 [ 599.488587] _copy_from_iter+0x1d3/0x1320 [ 599.488878] ? __build_skb_around+0x27f/0x3b0 [ 599.489203] ? __pfx__copy_from_iter+0x10/0x10 [ 599.489525] ? __pfx___alloc_skb+0x10/0x10 [ 599.489837] ? __netlink_dump_start+0x8e0/0x9c0 [ 599.490158] ? __virt_addr_valid+0x102/0x340 [ 599.490501] ? __check_object_size+0x3d4/0x8c0 [ 599.490821] netlink_sendmsg+0x880/0xe40 [ 599.491124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.491459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.491772] sock_sendmsg+0x1b6/0x200 [ 599.492049] ____sys_sendmsg+0x76a/0x9a0 [ 599.492346] ? copy_msghdr_from_user+0xfc/0x150 [ 599.492661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.492981] ? find_held_lock+0x2c/0x110 [ 599.493271] ? get_pid_task+0xec/0x250 [ 599.493551] ___sys_sendmsg+0x110/0x1b0 [ 599.493839] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.494150] ? __fget_files+0x245/0x480 [ 599.494434] ? __pfx_lock_release+0x10/0x10 [ 599.494739] ? lock_release+0x1e3/0x680 [ 599.495020] ? __fget_files+0x267/0x480 [ 599.495316] ? __fget_light+0xe5/0x270 [ 599.495618] __sys_sendmsg+0xf7/0x1d0 [ 599.495875] ? __pfx___sys_sendmsg+0x10/0x10 [ 599.496211] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 599.496567] ? syscall_enter_from_user_mode+0x21/0x50 [ 599.496940] do_syscall_64+0x3f/0x90 [ 599.497207] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 599.497592] RIP: 0033:0x7f40c9960b19 [ 599.497855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 599.499135] RSP: 002b:00007f40c6ed6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.499633] RAX: ffffffffffffffda RBX: 00007f40c9a73f60 RCX: 00007f40c9960b19 [ 599.500136] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 599.500652] RBP: 00007f40c6ed61d0 R08: 0000000000000000 R09: 0000000000000000 [ 599.501148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.501656] R13: 00007ffef9c71f0f R14: 00007f40c6ed6300 R15: 0000000000022000 [ 599.502150] 01:56:37 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 2) 01:56:37 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 5) [ 599.573226] loop6: detected capacity change from 0 to 40 [ 599.578713] FAULT_INJECTION: forcing a failure. [ 599.578713] name failslab, interval 1, probability 0, space 0, times 0 [ 599.580102] CPU: 1 PID: 5496 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 599.581096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 599.582144] Call Trace: [ 599.582475] [ 599.582768] dump_stack_lvl+0xc1/0xf0 [ 599.583267] should_fail_ex+0x4b4/0x5b0 [ 599.583794] ? vm_area_dup+0x52/0x160 [ 599.584297] should_failslab+0x9/0x20 [ 599.584797] kmem_cache_alloc+0x61/0x390 [ 599.585323] vm_area_dup+0x52/0x160 [ 599.585838] __split_vma+0x173/0x770 [ 599.586324] ? __pfx___split_vma+0x10/0x10 [ 599.586876] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 599.587577] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 599.588326] ? mtree_range_walk+0x5c7/0x910 [ 599.588931] ? mas_walk+0x5c6/0x7c0 [ 599.589422] do_vmi_munmap+0x1e7/0x430 [ 599.589938] do_munmap+0xb1/0xf0 [ 599.590391] ? __pfx_do_munmap+0x10/0x10 [ 599.590918] ? rcu_read_lock_any_held+0x79/0xa0 [ 599.591517] ? vfs_write+0x155/0xda0 [ 599.592014] __do_sys_mremap+0x1326/0x1650 [ 599.592561] ? __pfx___do_sys_mremap+0x10/0x10 [ 599.593172] ? fput+0x2f/0x1a0 [ 599.593599] ? ksys_write+0x19e/0x250 [ 599.594098] ? __pfx_ksys_write+0x10/0x10 [ 599.594635] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 599.595309] do_syscall_64+0x3f/0x90 [ 599.595787] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 599.596442] RIP: 0033:0x7f8595db6b19 [ 599.596902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 599.599029] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 599.599933] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 599.600787] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 599.601638] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 599.602501] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 599.603356] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 599.604231] [ 599.605653] FAT-fs (loop6): bogus number of reserved sectors [ 599.606496] FAT-fs (loop6): Can't find a valid FAT filesystem 01:56:48 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 6) 01:56:48 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:48 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:56:48 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 1) 01:56:48 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:56:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:56:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 7) 01:56:48 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 3) [ 611.416878] FAULT_INJECTION: forcing a failure. [ 611.416878] name failslab, interval 1, probability 0, space 0, times 0 [ 611.417663] CPU: 0 PID: 5506 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 611.418202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.418758] Call Trace: [ 611.418932] [ 611.419088] dump_stack_lvl+0xc1/0xf0 [ 611.419362] should_fail_ex+0x4b4/0x5b0 [ 611.419635] ? vm_area_dup+0x20/0x160 [ 611.419912] should_failslab+0x9/0x20 [ 611.420176] kmem_cache_alloc+0x61/0x390 [ 611.420457] ? mas_destroy+0x216/0x8c0 [ 611.420742] vm_area_dup+0x20/0x160 [ 611.420997] __split_vma+0x173/0x770 [ 611.421256] ? __pfx___split_vma+0x10/0x10 [ 611.421558] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 611.421943] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 611.422334] ? mtree_range_walk+0x5c7/0x910 [ 611.422637] ? mas_walk+0x5c6/0x7c0 [ 611.422899] do_vmi_munmap+0x1e7/0x430 [ 611.423167] do_munmap+0xb1/0xf0 [ 611.423404] ? __pfx_do_munmap+0x10/0x10 [ 611.423688] ? rcu_read_lock_any_held+0x79/0xa0 [ 611.424013] ? vfs_write+0x155/0xda0 [ 611.424275] __do_sys_mremap+0x1326/0x1650 [ 611.424575] ? __pfx___do_sys_mremap+0x10/0x10 [ 611.424895] ? perf_trace_preemptirq_template+0x252/0x420 [ 611.425282] ? fput+0x2f/0x1a0 [ 611.425519] ? __pfx_ksys_write+0x10/0x10 [ 611.425808] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 611.426182] do_syscall_64+0x3f/0x90 [ 611.426444] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 611.426797] RIP: 0033:0x7f5b71e1fb19 [ 611.427044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.428196] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 611.428697] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 611.429175] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 611.429641] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 611.430122] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 611.430589] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 611.431058] [ 611.449081] FAULT_INJECTION: forcing a failure. [ 611.449081] name failslab, interval 1, probability 0, space 0, times 0 [ 611.451176] CPU: 1 PID: 5508 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230721 #1 [ 611.452534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.453920] Call Trace: [ 611.454271] [ 611.454654] dump_stack_lvl+0xc1/0xf0 [ 611.455319] should_fail_ex+0x4b4/0x5b0 [ 611.456019] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 611.457129] should_failslab+0x9/0x20 [ 611.457788] __kmem_cache_alloc_node+0x66/0x310 [ 611.458634] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 611.459751] ? avc_has_perm_noaudit+0x148/0x3a0 [ 611.460592] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 611.461705] __kmalloc+0x4d/0x160 [ 611.462337] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 611.463458] ? genl_cmd_full_to_split+0x371/0x660 [ 611.464317] genl_family_rcv_msg_doit.isra.0+0x9f/0x2e0 [ 611.465234] ? __pfx_genl_family_rcv_msg_doit.isra.0+0x10/0x10 [ 611.466273] ? cap_capable+0x1be/0x220 [ 611.466815] ? security_capable+0x99/0xc0 [ 611.467531] ? ns_capable+0xe4/0x120 [ 611.468039] genl_rcv_msg+0x503/0x7e0 [ 611.468732] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.469305] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 611.470104] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 611.470816] ? __pfx_nl80211_post_doit+0x10/0x10 [ 611.471624] ? lock_acquire+0x19a/0x4c0 [ 611.472154] ? __create_object+0x3ee/0xc90 [ 611.472910] netlink_rcv_skb+0x15d/0x450 [ 611.473455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.474225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.474867] ? __pfx_down_read+0x10/0x10 [ 611.475567] ? netlink_deliver_tap+0x1b2/0xcc0 [ 611.475840] loop6: detected capacity change from 0 to 40 [ 611.476157] ? is_vmalloc_addr+0x86/0xa0 [ 611.477074] genl_rcv+0x28/0x40 [ 611.477671] netlink_unicast+0x552/0x800 [ 611.478269] ? __pfx_netlink_unicast+0x10/0x10 [ 611.479081] ? __virt_addr_valid+0x102/0x340 [ 611.479719] netlink_sendmsg+0x923/0xe40 [ 611.480450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.481107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.481742] sock_sendmsg+0x1b6/0x200 [ 611.482425] ____sys_sendmsg+0x76a/0x9a0 [ 611.483002] ? copy_msghdr_from_user+0xfc/0x150 [ 611.483651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.484441] ? find_held_lock+0x2c/0x110 [ 611.485033] ? get_pid_task+0xec/0x250 [ 611.485720] ___sys_sendmsg+0x110/0x1b0 [ 611.486306] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.487075] ? __fget_files+0x245/0x480 [ 611.487294] FAT-fs (loop6): bogus number of reserved sectors [ 611.487609] ? __pfx_lock_release+0x10/0x10 [ 611.487977] FAT-fs (loop6): Can't find a valid FAT filesystem [ 611.488546] ? lock_release+0x1e3/0x680 [ 611.489516] ? __fget_files+0x267/0x480 [ 611.490235] ? __fget_light+0xe5/0x270 [ 611.490808] __sys_sendmsg+0xf7/0x1d0 [ 611.491487] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.492145] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 611.492851] ? syscall_enter_from_user_mode+0x21/0x50 [ 611.493733] do_syscall_64+0x3f/0x90 [ 611.494293] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 611.495199] RIP: 0033:0x7f40c9960b19 [ 611.495710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.498679] RSP: 002b:00007f40c6ed6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.499690] RAX: ffffffffffffffda RBX: 00007f40c9a73f60 RCX: 00007f40c9960b19 [ 611.500586] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 611.501466] RBP: 00007f40c6ed61d0 R08: 0000000000000000 R09: 0000000000000000 [ 611.502392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.503327] R13: 00007ffef9c71f0f R14: 00007f40c6ed6300 R15: 0000000000022000 [ 611.504283] [ 611.520048] loop4: detected capacity change from 0 to 39 01:56:49 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 2) 01:56:49 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 4) [ 611.542360] FAT-fs (loop4): bogus number of reserved sectors [ 611.543622] FAT-fs (loop4): Can't find a valid FAT filesystem 01:56:49 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:56:49 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 3) 01:56:49 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 7) [ 611.597396] FAULT_INJECTION: forcing a failure. [ 611.597396] name failslab, interval 1, probability 0, space 0, times 0 [ 611.598166] CPU: 0 PID: 5522 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 611.598714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.599262] Call Trace: [ 611.599443] [ 611.599603] dump_stack_lvl+0xc1/0xf0 [ 611.599881] should_fail_ex+0x4b4/0x5b0 [ 611.600179] ? vm_area_dup+0x20/0x160 [ 611.600457] should_failslab+0x9/0x20 [ 611.600740] kmem_cache_alloc+0x61/0x390 [ 611.601032] ? mas_destroy+0x216/0x8c0 [ 611.601315] vm_area_dup+0x20/0x160 [ 611.601577] __split_vma+0x173/0x770 [ 611.601854] ? __pfx___split_vma+0x10/0x10 [ 611.602168] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 01:56:49 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) [ 611.602546] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 611.603112] ? mtree_range_walk+0x5c7/0x910 [ 611.603430] ? mas_walk+0x5c6/0x7c0 [ 611.603704] do_vmi_munmap+0x1e7/0x430 [ 611.603992] do_munmap+0xb1/0xf0 [ 611.604237] ? __pfx_do_munmap+0x10/0x10 [ 611.604533] ? rcu_read_lock_any_held+0x79/0xa0 [ 611.604869] ? vfs_write+0x155/0xda0 [ 611.605140] __do_sys_mremap+0x1326/0x1650 [ 611.605456] ? __pfx___do_sys_mremap+0x10/0x10 [ 611.605786] ? perf_trace_preemptirq_template+0x252/0x420 [ 611.606200] ? fput+0x2f/0x1a0 [ 611.606445] ? __pfx_ksys_write+0x10/0x10 [ 611.606739] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 611.607118] do_syscall_64+0x3f/0x90 [ 611.607388] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 611.607759] RIP: 0033:0x7f68713cdb19 [ 611.608020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.609232] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 611.609743] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 611.610234] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 611.610710] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 611.611193] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 611.611676] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 611.612170] 01:56:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 8) 01:56:49 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:56:49 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 5) 01:56:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 9) [ 611.674212] FAULT_INJECTION: forcing a failure. [ 611.674212] name failslab, interval 1, probability 0, space 0, times 0 [ 611.675009] CPU: 0 PID: 5531 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230721 #1 [ 611.675561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.676109] Call Trace: [ 611.676298] [ 611.676463] dump_stack_lvl+0xc1/0xf0 [ 611.676740] should_fail_ex+0x4b4/0x5b0 [ 611.677022] ? __alloc_skb+0x28c/0x330 [ 611.677304] should_failslab+0x9/0x20 [ 611.677574] kmem_cache_alloc_node+0x65/0x3b0 [ 611.677909] ? __pfx_nl80211_post_doit+0x10/0x10 [ 611.678253] __alloc_skb+0x28c/0x330 [ 611.678530] ? __pfx___alloc_skb+0x10/0x10 [ 611.678837] ? ns_capable+0xe4/0x120 [ 611.679113] netlink_ack+0x35e/0x1370 [ 611.679392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.679703] ? __pfx_netlink_ack+0x10/0x10 [ 611.680005] ? lock_acquire+0x19a/0x4c0 [ 611.680291] ? __create_object+0x3ee/0xc90 [ 611.680606] netlink_rcv_skb+0x35a/0x450 [ 611.680897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.681209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.681544] ? __pfx_down_read+0x10/0x10 [ 611.681837] ? netlink_deliver_tap+0x1b2/0xcc0 [ 611.682171] ? is_vmalloc_addr+0x86/0xa0 [ 611.682464] genl_rcv+0x28/0x40 [ 611.682707] netlink_unicast+0x552/0x800 [ 611.683003] ? __pfx_netlink_unicast+0x10/0x10 [ 611.683327] ? __virt_addr_valid+0x102/0x340 [ 611.683653] netlink_sendmsg+0x923/0xe40 [ 611.683949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.684285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.684604] sock_sendmsg+0x1b6/0x200 [ 611.684882] ____sys_sendmsg+0x76a/0x9a0 [ 611.685181] ? copy_msghdr_from_user+0xfc/0x150 [ 611.685515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.685844] ? find_held_lock+0x2c/0x110 [ 611.686158] ? get_pid_task+0xec/0x250 [ 611.686439] ___sys_sendmsg+0x110/0x1b0 [ 611.686716] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.687029] ? __fget_files+0x245/0x480 [ 611.687329] ? __pfx_lock_release+0x10/0x10 [ 611.687634] ? lock_release+0x1e3/0x680 [ 611.687922] ? __fget_files+0x267/0x480 [ 611.688212] ? __fget_light+0xe5/0x270 [ 611.688499] __sys_sendmsg+0xf7/0x1d0 [ 611.688767] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.689096] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 611.689463] ? syscall_enter_from_user_mode+0x21/0x50 [ 611.689824] do_syscall_64+0x3f/0x90 [ 611.690090] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 611.690452] RIP: 0033:0x7f40c9960b19 [ 611.690713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.691932] RSP: 002b:00007f40c6ed6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.692450] RAX: ffffffffffffffda RBX: 00007f40c9a73f60 RCX: 00007f40c9960b19 [ 611.692940] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 611.693426] RBP: 00007f40c6ed61d0 R08: 0000000000000000 R09: 0000000000000000 [ 611.693912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.694394] R13: 00007ffef9c71f0f R14: 00007f40c6ed6300 R15: 0000000000022000 [ 611.694892] [ 611.704632] FAULT_INJECTION: forcing a failure. [ 611.704632] name failslab, interval 1, probability 0, space 0, times 0 [ 611.705432] CPU: 0 PID: 5532 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 611.705998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.706554] Call Trace: [ 611.706736] [ 611.706897] dump_stack_lvl+0xc1/0xf0 [ 611.707170] should_fail_ex+0x4b4/0x5b0 [ 611.707456] ? mas_alloc_nodes+0x4e7/0x890 [ 611.707758] should_failslab+0x9/0x20 [ 611.708031] kmem_cache_alloc+0x61/0x390 [ 611.708334] mas_alloc_nodes+0x4e7/0x890 [ 611.708633] mas_preallocate+0x1bf/0x370 [ 611.708926] __split_vma+0x191/0x770 [ 611.709196] ? __pfx___split_vma+0x10/0x10 [ 611.709512] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 611.709913] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 611.710330] ? mtree_range_walk+0x5c7/0x910 [ 611.710652] ? mas_walk+0x5c6/0x7c0 [ 611.710932] do_vmi_munmap+0x1e7/0x430 [ 611.711211] do_munmap+0xb1/0xf0 [ 611.711465] ? __pfx_do_munmap+0x10/0x10 [ 611.711757] ? rcu_read_lock_any_held+0x79/0xa0 [ 611.712097] ? vfs_write+0x155/0xda0 [ 611.712366] __do_sys_mremap+0x1326/0x1650 [ 611.712673] ? __pfx___do_sys_mremap+0x10/0x10 [ 611.713007] ? perf_trace_preemptirq_template+0x252/0x420 [ 611.713402] ? fput+0x2f/0x1a0 [ 611.713646] ? __pfx_ksys_write+0x10/0x10 [ 611.713943] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 611.714317] do_syscall_64+0x3f/0x90 [ 611.714587] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 611.714948] RIP: 0033:0x7f8595db6b19 [ 611.715207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.716416] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 611.716927] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 611.717413] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 611.717911] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 611.718398] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 611.718871] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 611.719370] 01:56:49 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) [ 611.780790] loop6: detected capacity change from 0 to 40 [ 611.787884] FAT-fs (loop6): bogus number of reserved sectors [ 611.788474] FAT-fs (loop6): Can't find a valid FAT filesystem [ 611.794156] FAULT_INJECTION: forcing a failure. [ 611.794156] name failslab, interval 1, probability 0, space 0, times 0 [ 611.795134] CPU: 0 PID: 5537 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 611.795689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.796241] Call Trace: [ 611.796431] [ 611.796596] dump_stack_lvl+0xc1/0xf0 [ 611.796878] should_fail_ex+0x4b4/0x5b0 [ 611.797166] ? vm_area_dup+0x52/0x160 [ 611.797448] should_failslab+0x9/0x20 [ 611.797724] kmem_cache_alloc+0x61/0x390 [ 611.798012] vm_area_dup+0x52/0x160 [ 611.798281] __split_vma+0x173/0x770 [ 611.798554] ? __pfx___split_vma+0x10/0x10 [ 611.798862] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 611.799251] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 611.799656] ? mtree_range_walk+0x5c7/0x910 [ 611.799972] ? mas_walk+0x5c6/0x7c0 [ 611.800243] do_vmi_munmap+0x1e7/0x430 [ 611.800526] do_munmap+0xb1/0xf0 [ 611.800773] ? __pfx_do_munmap+0x10/0x10 [ 611.801063] ? rcu_read_lock_any_held+0x79/0xa0 [ 611.801404] ? vfs_write+0x155/0xda0 [ 611.801679] __do_sys_mremap+0x1326/0x1650 [ 611.801994] ? __pfx___do_sys_mremap+0x10/0x10 [ 611.802327] ? perf_trace_preemptirq_template+0x252/0x420 [ 611.802712] ? fput+0x2f/0x1a0 [ 611.802955] ? __pfx_ksys_write+0x10/0x10 [ 611.803241] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 611.803615] do_syscall_64+0x3f/0x90 [ 611.803881] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 611.804250] RIP: 0033:0x7f5b71e1fb19 [ 611.804504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 611.805724] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 611.806229] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 611.806717] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 611.807202] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 611.807686] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 611.808169] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 611.808670] 01:57:01 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 6) 01:57:01 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 1) 01:57:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:57:01 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:57:01 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 4) 01:57:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 10) 01:57:01 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 8) 01:57:01 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 624.433625] loop6: detected capacity change from 0 to 40 [ 624.442705] FAT-fs (loop6): bogus number of reserved sectors [ 624.443124] FAT-fs (loop6): Can't find a valid FAT filesystem [ 624.444092] loop4: detected capacity change from 0 to 39 [ 624.449914] FAT-fs (loop4): bogus number of reserved sectors [ 624.450388] FAT-fs (loop4): Can't find a valid FAT filesystem 01:57:02 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:57:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 11) [ 624.539378] loop6: detected capacity change from 0 to 40 [ 624.541555] FAT-fs (loop6): bogus number of reserved sectors [ 624.541976] FAT-fs (loop6): Can't find a valid FAT filesystem 01:57:02 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:57:02 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 5) 01:57:02 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 2) 01:57:02 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 624.627026] loop6: detected capacity change from 0 to 40 [ 624.628649] FAULT_INJECTION: forcing a failure. [ 624.628649] name failslab, interval 1, probability 0, space 0, times 0 [ 624.630200] CPU: 0 PID: 5567 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 624.631236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.632267] Call Trace: [ 624.632614] [ 624.632927] dump_stack_lvl+0xc1/0xf0 [ 624.633450] should_fail_ex+0x4b4/0x5b0 [ 624.633993] ? vm_area_dup+0x52/0x160 [ 624.634533] should_failslab+0x9/0x20 [ 624.635057] kmem_cache_alloc+0x61/0x390 [ 624.635620] vm_area_dup+0x52/0x160 [ 624.636128] __split_vma+0x173/0x770 [ 624.636639] ? __pfx___split_vma+0x10/0x10 [ 624.637247] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 624.638004] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 624.638795] ? mtree_range_walk+0x5c7/0x910 [ 624.639408] ? mas_walk+0x5c6/0x7c0 [ 624.639934] do_vmi_munmap+0x1e7/0x430 [ 624.640477] do_munmap+0xb1/0xf0 [ 624.640951] ? __pfx_do_munmap+0x10/0x10 [ 624.641523] ? rcu_read_lock_any_held+0x79/0xa0 [ 624.642192] ? vfs_write+0x155/0xda0 [ 624.642719] __do_sys_mremap+0x1326/0x1650 [ 624.643322] ? __pfx___do_sys_mremap+0x10/0x10 [ 624.643956] ? perf_trace_preemptirq_template+0x252/0x420 [ 624.644718] ? fput+0x2f/0x1a0 [ 624.645184] ? __pfx_ksys_write+0x10/0x10 [ 624.645755] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 624.646484] do_syscall_64+0x3f/0x90 [ 624.647016] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 624.647718] RIP: 0033:0x7f68713cdb19 [ 624.648220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.650570] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 624.651564] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 624.652493] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 624.653416] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 624.654353] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 624.655282] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 624.656234] [ 624.670509] FAT-fs (loop6): invalid media value (0x00) [ 624.670905] FAT-fs (loop6): Can't find a valid FAT filesystem 01:57:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 12) 01:57:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:57:13 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 3) 01:57:13 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:57:13 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 7) 01:57:13 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 9) 01:57:13 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 6) 01:57:13 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:57:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (fail_nth: 13) 01:57:13 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 7) [ 635.720936] loop6: detected capacity change from 0 to 40 [ 635.725694] loop4: detected capacity change from 0 to 39 [ 635.736291] FAT-fs (loop6): invalid media value (0x00) [ 635.736353] FAT-fs (loop4): bogus number of reserved sectors [ 635.736660] FAT-fs (loop6): Can't find a valid FAT filesystem [ 635.737433] FAT-fs (loop4): Can't find a valid FAT filesystem [ 635.747987] FAULT_INJECTION: forcing a failure. [ 635.747987] name failslab, interval 1, probability 0, space 0, times 0 [ 635.748748] CPU: 0 PID: 5590 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 635.749328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.749841] Call Trace: [ 635.750030] [ 635.750202] dump_stack_lvl+0xc1/0xf0 [ 635.750495] should_fail_ex+0x4b4/0x5b0 [ 635.750795] should_failslab+0x9/0x20 [ 635.751080] kmem_cache_alloc_bulk+0x6b/0x630 [ 635.751417] ? kmem_cache_alloc+0x328/0x390 [ 635.751738] mas_alloc_nodes+0x337/0x890 [ 635.752023] mas_preallocate+0x1bf/0x370 [ 635.752309] __split_vma+0x191/0x770 [ 635.752569] ? __pfx___split_vma+0x10/0x10 [ 635.752870] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 635.753227] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 635.753623] ? mtree_range_walk+0x5c7/0x910 [ 635.753929] ? mas_walk+0x5c6/0x7c0 [ 635.754200] do_vmi_munmap+0x1e7/0x430 [ 635.754475] do_munmap+0xb1/0xf0 [ 635.754715] ? __pfx_do_munmap+0x10/0x10 [ 635.755003] ? rcu_read_lock_any_held+0x79/0xa0 [ 635.755334] ? vfs_write+0x155/0xda0 [ 635.755600] __do_sys_mremap+0x1326/0x1650 [ 635.755897] ? __pfx___do_sys_mremap+0x10/0x10 [ 635.756204] ? perf_trace_preemptirq_template+0x252/0x420 [ 635.756586] ? fput+0x2f/0x1a0 [ 635.756824] ? __pfx_ksys_write+0x10/0x10 [ 635.757110] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 635.757475] do_syscall_64+0x3f/0x90 [ 635.757754] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 635.758129] RIP: 0033:0x7f8595db6b19 [ 635.758384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.759675] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 635.760200] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 635.760717] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 635.761225] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 635.761715] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 635.761962] FAULT_INJECTION: forcing a failure. [ 635.761962] name failslab, interval 1, probability 0, space 0, times 0 [ 635.762216] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 635.762242] [ 635.764863] CPU: 1 PID: 5592 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 635.765888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.766935] Call Trace: [ 635.767284] [ 635.767580] dump_stack_lvl+0xc1/0xf0 [ 635.768101] should_fail_ex+0x4b4/0x5b0 [ 635.768635] ? vm_area_dup+0x20/0x160 [ 635.769159] should_failslab+0x9/0x20 [ 635.769662] kmem_cache_alloc+0x61/0x390 [ 635.770238] ? mas_destroy+0x216/0x8c0 [ 635.770761] vm_area_dup+0x20/0x160 [ 635.771261] __split_vma+0x173/0x770 [ 635.771757] ? __pfx___split_vma+0x10/0x10 [ 635.772345] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 635.773064] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 635.773832] ? mtree_range_walk+0x5c7/0x910 [ 635.774448] ? mas_walk+0x5c6/0x7c0 [ 635.774952] do_vmi_munmap+0x1e7/0x430 [ 635.775564] do_munmap+0xb1/0xf0 [ 635.776115] ? __pfx_do_munmap+0x10/0x10 [ 635.776738] ? rcu_read_lock_any_held+0x79/0xa0 [ 635.777185] FAULT_INJECTION: forcing a failure. [ 635.777185] name failslab, interval 1, probability 0, space 0, times 0 [ 635.777366] ? vfs_write+0x155/0xda0 [ 635.778593] __do_sys_mremap+0x1326/0x1650 [ 635.779172] ? __pfx___do_sys_mremap+0x10/0x10 [ 635.779788] ? fput+0x2f/0x1a0 [ 635.780247] ? ksys_write+0x19e/0x250 [ 635.780750] ? __pfx_ksys_write+0x10/0x10 [ 635.781300] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 635.781978] do_syscall_64+0x3f/0x90 [ 635.782510] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 635.783184] RIP: 0033:0x7f073098bb19 [ 635.783658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.785875] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 635.786836] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 635.787718] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 635.788609] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 635.789522] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 635.790442] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 635.791359] [ 635.791672] CPU: 0 PID: 5595 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 635.792268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.792863] Call Trace: [ 635.793056] [ 635.793226] dump_stack_lvl+0xc1/0xf0 [ 635.793513] should_fail_ex+0x4b4/0x5b0 [ 635.793818] ? mas_alloc_nodes+0x4e7/0x890 [ 635.794119] should_failslab+0x9/0x20 [ 635.794372] kmem_cache_alloc+0x61/0x390 [ 635.794677] mas_alloc_nodes+0x4e7/0x890 [ 635.794987] mas_preallocate+0x1bf/0x370 [ 635.795290] __split_vma+0x191/0x770 [ 635.795571] ? __pfx___split_vma+0x10/0x10 [ 635.795898] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 635.796300] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 635.796732] ? mtree_range_walk+0x5c7/0x910 [ 635.797062] ? mas_walk+0x5c6/0x7c0 [ 635.797317] do_vmi_munmap+0x1e7/0x430 [ 635.797618] do_munmap+0xb1/0xf0 [ 635.797847] ? __pfx_do_munmap+0x10/0x10 [ 635.798148] ? rcu_read_lock_any_held+0x79/0xa0 [ 635.798477] ? vfs_write+0x155/0xda0 [ 635.798755] __do_sys_mremap+0x1326/0x1650 [ 635.799076] ? __pfx___do_sys_mremap+0x10/0x10 [ 635.799420] ? perf_trace_preemptirq_template+0x252/0x420 [ 635.799812] ? fput+0x2f/0x1a0 [ 635.800052] ? __pfx_ksys_write+0x10/0x10 [ 635.800362] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 635.800750] do_syscall_64+0x3f/0x90 [ 635.801033] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 635.801415] RIP: 0033:0x7f68713cdb19 [ 635.801652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.802926] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 635.803475] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 635.803973] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 635.804462] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 635.804980] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 635.805488] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 635.805995] [ 635.807958] FAULT_INJECTION: forcing a failure. [ 635.807958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.808968] CPU: 0 PID: 5596 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230721 #1 [ 635.809531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.810113] Call Trace: [ 635.810318] [ 635.810489] dump_stack_lvl+0xc1/0xf0 [ 635.810775] should_fail_ex+0x4b4/0x5b0 [ 635.811073] _copy_to_user+0x30/0xc0 [ 635.811361] simple_read_from_buffer+0xd0/0x170 [ 635.811706] proc_fail_nth_read+0x1a6/0x290 [ 635.812027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.812390] ? security_file_permission+0xb5/0xe0 [ 635.812756] vfs_read+0x1de/0x8f0 [ 635.813015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.813376] ? __pfx_vfs_read+0x10/0x10 [ 635.813677] ? __fget_light+0xe5/0x270 [ 635.813982] ? __fget_files+0x267/0x480 [ 635.814267] ksys_read+0x122/0x250 [ 635.814536] ? __pfx_ksys_read+0x10/0x10 [ 635.814843] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 635.815229] do_syscall_64+0x3f/0x90 [ 635.815516] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 635.815897] RIP: 0033:0x7f40c991369c [ 635.816175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 635.817279] RSP: 002b:00007f40c6ed6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 635.817829] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 00007f40c991369c [ 635.818338] RDX: 000000000000000f RSI: 00007f40c6ed61e0 RDI: 0000000000000004 [ 635.818849] RBP: 00007f40c6ed61d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.819361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 635.819873] R13: 00007ffef9c71f0f R14: 00007f40c6ed6300 R15: 0000000000022000 [ 635.820389] [ 635.822700] FAULT_INJECTION: forcing a failure. [ 635.822700] name failslab, interval 1, probability 0, space 0, times 0 [ 635.823467] CPU: 0 PID: 5591 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 635.824043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.824633] Call Trace: [ 635.824822] [ 635.824990] dump_stack_lvl+0xc1/0xf0 [ 635.825274] should_fail_ex+0x4b4/0x5b0 [ 635.825574] ? mas_alloc_nodes+0x4e7/0x890 [ 635.825886] should_failslab+0x9/0x20 [ 635.826175] kmem_cache_alloc+0x61/0x390 [ 635.826454] mas_alloc_nodes+0x4e7/0x890 [ 635.826765] mas_preallocate+0x1bf/0x370 [ 635.827041] __split_vma+0x191/0x770 [ 635.827321] ? __pfx___split_vma+0x10/0x10 [ 635.827612] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 635.828023] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 635.828402] ? mtree_range_walk+0x5c7/0x910 [ 635.828738] ? mas_walk+0x5c6/0x7c0 [ 635.828998] do_vmi_munmap+0x1e7/0x430 [ 635.829293] do_munmap+0xb1/0xf0 [ 635.829526] ? __pfx_do_munmap+0x10/0x10 [ 635.829827] ? rcu_read_lock_any_held+0x79/0xa0 [ 635.830140] ? vfs_write+0x155/0xda0 [ 635.830436] __do_sys_mremap+0x1326/0x1650 [ 635.830725] ? __pfx___do_sys_mremap+0x10/0x10 [ 635.831063] ? perf_trace_preemptirq_template+0x252/0x420 [ 635.831432] ? fput+0x2f/0x1a0 [ 635.831684] ? __pfx_ksys_write+0x10/0x10 [ 635.831960] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 635.832339] do_syscall_64+0x3f/0x90 [ 635.832653] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 635.833178] RIP: 0033:0x7f5b71e1fb19 [ 635.833420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.834727] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 635.835198] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 635.835634] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 635.836070] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 635.836508] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 635.836947] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 635.837395] 01:57:13 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:57:13 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 635.898819] loop6: detected capacity change from 0 to 40 [ 635.905190] FAT-fs (loop6): invalid media value (0x00) [ 635.905994] FAT-fs (loop6): Can't find a valid FAT filesystem 01:57:13 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 10) 01:57:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:57:13 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 4) 01:57:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:57:13 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:57:13 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 11) [ 636.075125] loop6: detected capacity change from 0 to 40 [ 636.075774] loop4: detected capacity change from 0 to 39 [ 636.082779] FAT-fs (loop6): invalid media value (0x00) [ 636.083493] FAT-fs (loop6): Can't find a valid FAT filesystem [ 636.084326] FAT-fs (loop4): bogus number of reserved sectors [ 636.084730] FAT-fs (loop4): Can't find a valid FAT filesystem 01:57:26 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:57:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:57:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:57:26 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 8) 01:57:26 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:57:26 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 5) 01:57:26 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 12) 01:57:26 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 8) [ 648.962107] FAULT_INJECTION: forcing a failure. [ 648.962107] name failslab, interval 1, probability 0, space 0, times 0 [ 648.962914] CPU: 0 PID: 5625 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 648.963444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 648.963971] Call Trace: [ 648.964147] [ 648.964248] loop6: detected capacity change from 0 to 40 [ 648.964647] dump_stack_lvl+0xc1/0xf0 [ 648.964675] should_fail_ex+0x4b4/0x5b0 [ 648.965438] ? vm_area_dup+0x52/0x160 [ 648.965715] should_failslab+0x9/0x20 [ 648.965980] kmem_cache_alloc+0x61/0x390 [ 648.966277] vm_area_dup+0x52/0x160 [ 648.966558] __split_vma+0x173/0x770 [ 648.966821] ? __pfx___split_vma+0x10/0x10 [ 648.967121] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 648.967497] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 648.967899] ? mtree_range_walk+0x5c7/0x910 [ 648.968210] ? mas_walk+0x5c6/0x7c0 [ 648.968480] do_vmi_munmap+0x1e7/0x430 [ 648.968763] do_munmap+0xb1/0xf0 [ 648.969000] ? __pfx_do_munmap+0x10/0x10 [ 648.969289] ? rcu_read_lock_any_held+0x79/0xa0 [ 648.969621] ? vfs_write+0x155/0xda0 [ 648.969880] __do_sys_mremap+0x1326/0x1650 [ 648.970178] ? __pfx___do_sys_mremap+0x10/0x10 [ 648.970561] ? perf_trace_preemptirq_template+0x252/0x420 [ 648.970944] ? fput+0x2f/0x1a0 [ 648.971174] ? __pfx_ksys_write+0x10/0x10 [ 648.971465] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 648.971848] do_syscall_64+0x3f/0x90 [ 648.971961] loop4: detected capacity change from 0 to 39 [ 648.972123] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 648.973193] RIP: 0033:0x7f073098bb19 [ 648.973452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 648.974721] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 648.975265] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 648.975766] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 648.976264] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 648.976759] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 648.977257] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 648.977767] [ 648.996481] FAT-fs (loop6): invalid media value (0x00) [ 648.997206] FAT-fs (loop6): Can't find a valid FAT filesystem [ 648.998067] FAT-fs (loop4): bogus number of reserved sectors [ 648.999321] FAT-fs (loop4): Can't find a valid FAT filesystem 01:57:26 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 13) 01:57:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:57:40 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 01:57:40 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 6) 01:57:40 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 9) 01:57:40 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 14) 01:57:40 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 9) 01:57:40 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:57:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:57:40 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:57:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 663.108102] loop4: detected capacity change from 0 to 39 [ 663.113434] loop6: detected capacity change from 0 to 40 [ 663.114575] FAULT_INJECTION: forcing a failure. [ 663.114575] name failslab, interval 1, probability 0, space 0, times 0 [ 663.115950] CPU: 1 PID: 5654 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 663.116946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 663.117944] Call Trace: [ 663.118269] [ 663.118575] dump_stack_lvl+0xc1/0xf0 [ 663.119082] should_fail_ex+0x4b4/0x5b0 [ 663.119609] should_failslab+0x9/0x20 [ 663.120107] kmem_cache_alloc_bulk+0x6b/0x630 [ 663.120697] ? kmem_cache_alloc+0x328/0x390 [ 663.121267] mas_alloc_nodes+0x337/0x890 [ 663.121804] mas_preallocate+0x1bf/0x370 [ 663.122340] __split_vma+0x191/0x770 [ 663.122844] ? __pfx___split_vma+0x10/0x10 [ 663.123414] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 663.124127] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 663.124862] ? mtree_range_walk+0x5c7/0x910 [ 663.125443] ? mas_walk+0x5c6/0x7c0 [ 663.125950] do_vmi_munmap+0x1e7/0x430 [ 663.126465] do_munmap+0xb1/0xf0 [ 663.126937] ? __pfx_do_munmap+0x10/0x10 [ 663.127472] ? rcu_read_lock_any_held+0x79/0xa0 [ 663.128086] ? vfs_write+0x155/0xda0 [ 663.128584] __do_sys_mremap+0x1326/0x1650 [ 663.129153] ? __pfx___do_sys_mremap+0x10/0x10 [ 663.129761] ? fput+0x2f/0x1a0 [ 663.130203] ? ksys_write+0x19e/0x250 [ 663.130716] ? __pfx_ksys_write+0x10/0x10 [ 663.131259] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 663.131935] do_syscall_64+0x3f/0x90 [ 663.132421] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 663.133090] RIP: 0033:0x7f5b71e1fb19 [ 663.133572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 663.135772] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 663.136699] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 663.137580] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 663.138449] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 663.139331] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 663.140215] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 663.141117] 01:57:40 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 15) [ 663.154647] FAT-fs (loop6): invalid media value (0x00) [ 663.155046] FAT-fs (loop6): Can't find a valid FAT filesystem [ 663.157016] FAT-fs (loop4): bogus number of reserved sectors [ 663.157847] FAT-fs (loop4): Can't find a valid FAT filesystem 01:57:40 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 7) [ 663.161661] FAULT_INJECTION: forcing a failure. [ 663.161661] name failslab, interval 1, probability 0, space 0, times 0 [ 663.163065] CPU: 1 PID: 5656 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 663.164059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 663.165048] Call Trace: [ 663.165381] [ 663.165673] dump_stack_lvl+0xc1/0xf0 [ 663.166164] should_fail_ex+0x4b4/0x5b0 [ 663.166708] should_failslab+0x9/0x20 [ 663.167207] kmem_cache_alloc_bulk+0x6b/0x630 [ 663.167798] ? kmem_cache_alloc+0x328/0x390 [ 663.168368] mas_alloc_nodes+0x337/0x890 [ 663.168911] mas_preallocate+0x1bf/0x370 [ 663.169455] __split_vma+0x191/0x770 [ 663.169949] ? __pfx___split_vma+0x10/0x10 [ 663.170532] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 663.171247] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 663.172000] ? mtree_range_walk+0x5c7/0x910 [ 663.172581] ? mas_walk+0x5c6/0x7c0 [ 663.173078] do_vmi_munmap+0x1e7/0x430 [ 663.173595] do_munmap+0xb1/0xf0 [ 663.174055] ? __pfx_do_munmap+0x10/0x10 [ 663.174613] ? rcu_read_lock_any_held+0x79/0xa0 [ 663.175230] ? vfs_write+0x155/0xda0 [ 663.175724] __do_sys_mremap+0x1326/0x1650 [ 663.176287] ? __pfx___do_sys_mremap+0x10/0x10 [ 663.176895] ? fput+0x2f/0x1a0 [ 663.177332] ? ksys_write+0x19e/0x250 [ 663.177829] ? __pfx_ksys_write+0x10/0x10 [ 663.178375] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 663.179072] do_syscall_64+0x3f/0x90 [ 663.179564] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 663.180236] RIP: 0033:0x7f68713cdb19 [ 663.180712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 663.182938] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 663.183880] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 663.184757] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 663.185643] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 663.186548] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 663.187436] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 663.188329] [ 663.204993] FAULT_INJECTION: forcing a failure. [ 663.204993] name failslab, interval 1, probability 0, space 0, times 0 [ 663.205810] CPU: 0 PID: 5665 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 663.206354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 663.206890] Call Trace: [ 663.207071] [ 663.207231] dump_stack_lvl+0xc1/0xf0 [ 663.207504] should_fail_ex+0x4b4/0x5b0 [ 663.207787] ? mas_alloc_nodes+0x4e7/0x890 [ 663.208085] should_failslab+0x9/0x20 [ 663.208349] kmem_cache_alloc+0x61/0x390 [ 663.208636] mas_alloc_nodes+0x4e7/0x890 [ 663.208922] mas_preallocate+0x1bf/0x370 [ 663.209204] __split_vma+0x191/0x770 [ 663.209472] ? __pfx___split_vma+0x10/0x10 [ 663.209773] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 663.210147] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 663.210540] ? mtree_range_walk+0x5c7/0x910 [ 663.210850] ? mas_walk+0x5c6/0x7c0 [ 663.211111] do_vmi_munmap+0x1e7/0x430 [ 663.211387] do_munmap+0xb1/0xf0 [ 663.211645] ? __pfx_do_munmap+0x10/0x10 [ 663.211949] ? rcu_read_lock_any_held+0x79/0xa0 [ 663.212297] ? vfs_write+0x155/0xda0 [ 663.212587] __do_sys_mremap+0x1326/0x1650 [ 663.212904] ? __pfx___do_sys_mremap+0x10/0x10 [ 663.213244] ? perf_trace_preemptirq_template+0x252/0x420 [ 663.213651] ? fput+0x2f/0x1a0 [ 663.213901] ? __pfx_ksys_write+0x10/0x10 [ 663.214174] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 663.214567] do_syscall_64+0x3f/0x90 [ 663.214851] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 663.215238] RIP: 0033:0x7f073098bb19 [ 663.215500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 663.216764] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 663.217311] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 663.217810] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 663.218378] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 663.219076] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 663.219675] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 663.220192] 01:57:51 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 8) 01:57:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:57:51 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 10) 01:57:51 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 16) 01:57:51 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 10) 01:57:51 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:57:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:57:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 674.092781] loop4: detected capacity change from 0 to 39 [ 674.097734] loop6: detected capacity change from 0 to 40 [ 674.099174] FAT-fs (loop4): bogus number of reserved sectors [ 674.099729] FAT-fs (loop4): Can't find a valid FAT filesystem [ 674.102281] FAT-fs (loop6): bogus number of FAT sectors [ 674.102695] FAT-fs (loop6): Can't find a valid FAT filesystem 01:57:51 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 9) 01:57:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 674.204192] FAULT_INJECTION: forcing a failure. [ 674.204192] name failslab, interval 1, probability 0, space 0, times 0 [ 674.205005] CPU: 1 PID: 5689 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 674.205580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.206158] Call Trace: [ 674.206350] [ 674.206517] dump_stack_lvl+0xc1/0xf0 [ 674.206815] should_fail_ex+0x4b4/0x5b0 [ 674.207112] should_failslab+0x9/0x20 [ 674.207398] kmem_cache_alloc_bulk+0x6b/0x630 [ 674.207733] ? kmem_cache_alloc+0x328/0x390 [ 674.208057] mas_alloc_nodes+0x337/0x890 [ 674.208363] mas_preallocate+0x1bf/0x370 [ 674.208663] __split_vma+0x191/0x770 [ 674.208942] ? __pfx___split_vma+0x10/0x10 [ 674.209263] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 674.209680] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 674.210101] ? mtree_range_walk+0x5c7/0x910 [ 674.210432] ? mas_walk+0x5c6/0x7c0 [ 674.210729] do_vmi_munmap+0x1e7/0x430 [ 674.211016] do_munmap+0xb1/0xf0 [ 674.211269] ? __pfx_do_munmap+0x10/0x10 [ 674.211574] ? rcu_read_lock_any_held+0x79/0xa0 [ 674.211920] ? vfs_write+0x155/0xda0 [ 674.212198] __do_sys_mremap+0x1326/0x1650 [ 674.212517] ? __pfx___do_sys_mremap+0x10/0x10 [ 674.212866] ? fput+0x2f/0x1a0 [ 674.213115] ? ksys_write+0x19e/0x250 [ 674.213398] ? __pfx_ksys_write+0x10/0x10 [ 674.213710] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 674.214100] do_syscall_64+0x3f/0x90 [ 674.214377] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 674.214765] RIP: 0033:0x7f073098bb19 [ 674.215033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.216289] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 674.216830] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 674.217329] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 674.217833] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 674.218337] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 674.218853] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 674.219366] [ 674.225782] loop6: detected capacity change from 0 to 40 01:57:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:57:51 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 01:57:51 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 17) [ 674.239380] FAT-fs (loop6): bogus number of FAT sectors [ 674.239766] FAT-fs (loop6): Can't find a valid FAT filesystem 01:57:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:57:51 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 11) 01:57:51 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 11) 01:57:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 674.292563] loop4: detected capacity change from 0 to 39 [ 674.312294] FAT-fs (loop4): bogus number of reserved sectors [ 674.313178] FAT-fs (loop4): Can't find a valid FAT filesystem [ 674.326992] loop6: detected capacity change from 0 to 40 [ 674.334712] FAT-fs (loop6): bogus number of FAT sectors [ 674.335110] FAT-fs (loop6): Can't find a valid FAT filesystem 01:57:51 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 10) 01:57:51 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 12) 01:57:51 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 18) 01:57:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:57:51 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 11) [ 674.440226] FAULT_INJECTION: forcing a failure. [ 674.440226] name failslab, interval 1, probability 0, space 0, times 0 [ 674.441133] CPU: 1 PID: 5712 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 674.441705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.442279] Call Trace: [ 674.442465] [ 674.442630] dump_stack_lvl+0xc1/0xf0 [ 674.442937] should_fail_ex+0x4b4/0x5b0 [ 674.443233] ? mas_alloc_nodes+0x4e7/0x890 [ 674.443538] should_failslab+0x9/0x20 [ 674.443824] kmem_cache_alloc+0x61/0x390 [ 674.444127] ? mas_prev_slot+0x393/0x11e0 [ 674.444438] mas_alloc_nodes+0x4e7/0x890 [ 674.444743] mas_preallocate+0x1bf/0x370 [ 674.445048] vma_merge+0x98e/0x1a60 [ 674.445326] ? __pfx_vma_merge+0x10/0x10 [ 674.445622] ? find_vma_prev+0xe8/0x160 [ 674.445909] ? __pfx_find_vma_prev+0x10/0x10 [ 674.446238] ? lock_release+0x1e3/0x680 [ 674.446543] copy_vma+0x25f/0xb50 [ 674.446840] ? __pfx_copy_vma+0x10/0x10 [ 674.447145] ? up_write+0x196/0x510 [ 674.447419] ? lock_is_held_type+0x9f/0x120 [ 674.447737] move_vma.constprop.0+0x5b4/0x1ba0 [ 674.448089] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 674.448457] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 674.448884] ? __pfx_do_munmap+0x10/0x10 [ 674.449184] ? may_expand_vm.part.0+0x1c5/0x340 [ 674.449526] ? cap_mmap_addr+0x54/0x310 [ 674.449823] ? selinux_mmap_addr+0x2d/0x110 [ 674.450135] ? security_mmap_addr+0x7d/0xa0 [ 674.450467] __do_sys_mremap+0x94e/0x1650 [ 674.450795] ? __pfx___do_sys_mremap+0x10/0x10 [ 674.451140] ? fput+0x2f/0x1a0 [ 674.451392] ? ksys_write+0x19e/0x250 [ 674.451670] ? __pfx_ksys_write+0x10/0x10 [ 674.451973] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 674.452357] do_syscall_64+0x3f/0x90 [ 674.452635] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 674.453010] RIP: 0033:0x7f8595db6b19 [ 674.453276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.454529] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 674.455085] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 674.455593] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 674.456093] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 674.456591] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 674.457098] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 674.457614] 01:57:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:57:52 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 12) [ 674.500805] loop6: detected capacity change from 0 to 40 [ 674.531645] loop4: detected capacity change from 0 to 39 [ 674.540957] FAT-fs (loop4): bogus number of reserved sectors [ 674.541443] FAT-fs (loop4): Can't find a valid FAT filesystem 01:58:04 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 13) 01:58:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:58:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:58:04 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 13) 01:58:04 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:58:04 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 19) 01:58:04 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:58:04 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 12) [ 686.761991] loop6: detected capacity change from 0 to 40 [ 686.766645] loop4: detected capacity change from 0 to 39 [ 686.783472] FAT-fs (loop4): bogus number of reserved sectors [ 686.783884] FAT-fs (loop4): Can't find a valid FAT filesystem 01:58:22 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 20) 01:58:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:58:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:58:22 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 13) 01:58:22 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:58:22 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 14) 01:58:22 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 1) 01:58:22 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 14) [ 705.052255] loop6: detected capacity change from 0 to 40 [ 705.052639] loop4: detected capacity change from 0 to 39 [ 705.061037] FAULT_INJECTION: forcing a failure. [ 705.061037] name failslab, interval 1, probability 0, space 0, times 0 [ 705.062706] CPU: 1 PID: 5756 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 705.063826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 705.064927] Call Trace: [ 705.065288] [ 705.065616] dump_stack_lvl+0xc1/0xf0 [ 705.066170] should_fail_ex+0x4b4/0x5b0 [ 705.066721] should_failslab+0x9/0x20 [ 705.067298] kmem_cache_alloc_bulk+0x6b/0x630 [ 705.067936] ? kmem_cache_alloc+0x328/0x390 [ 705.068541] ? mas_prev_slot+0x393/0x11e0 [ 705.069138] mas_alloc_nodes+0x337/0x890 [ 705.069738] mas_preallocate+0x1bf/0x370 [ 705.070323] vma_merge+0x98e/0x1a60 [ 705.070859] ? __pfx_vma_merge+0x10/0x10 [ 705.071473] ? find_vma_prev+0xe8/0x160 [ 705.072051] ? __pfx_find_vma_prev+0x10/0x10 [ 705.072674] ? lock_release+0x1e3/0x680 [ 705.073228] copy_vma+0x25f/0xb50 [ 705.073753] ? __pfx_copy_vma+0x10/0x10 [ 705.074357] ? up_write+0x196/0x510 [ 705.074891] ? lock_is_held_type+0x9f/0x120 [ 705.075549] move_vma.constprop.0+0x5b4/0x1ba0 [ 705.076247] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 705.077017] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 705.077898] ? __pfx_do_munmap+0x10/0x10 [ 705.078520] ? may_expand_vm.part.0+0x1c5/0x340 [ 705.079249] ? cap_mmap_addr+0x54/0x310 [ 705.079864] ? selinux_mmap_addr+0x2d/0x110 [ 705.080515] ? security_mmap_addr+0x7d/0xa0 [ 705.081186] __do_sys_mremap+0x94e/0x1650 [ 705.081828] ? __pfx___do_sys_mremap+0x10/0x10 [ 705.082550] ? fput+0x2f/0x1a0 [ 705.083055] ? ksys_write+0x19e/0x250 [ 705.083608] ? __pfx_ksys_write+0x10/0x10 [ 705.084198] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 705.084948] do_syscall_64+0x3f/0x90 [ 705.085469] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 705.086228] RIP: 0033:0x7f8595db6b19 [ 705.086765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 705.089249] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 705.090234] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 705.091261] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 705.092240] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 705.093233] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 705.094216] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 705.095274] [ 705.113980] FAT-fs (loop4): bogus number of reserved sectors [ 705.115280] FAT-fs (loop4): Can't find a valid FAT filesystem 01:58:22 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 2) 01:58:22 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 15) 01:58:22 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:58:22 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 14) 01:58:22 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 15) 01:58:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:58:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:58:22 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 21) [ 705.346571] loop6: detected capacity change from 0 to 40 [ 705.398054] loop4: detected capacity change from 0 to 39 [ 705.417093] FAT-fs (loop4): bogus number of reserved sectors [ 705.417940] FAT-fs (loop4): Can't find a valid FAT filesystem 01:58:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x9, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:58:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:58:35 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 3) 01:58:35 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 22) 01:58:35 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 16) 01:58:35 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 15) 01:58:35 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:58:35 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 16) [ 717.850522] loop4: detected capacity change from 0 to 39 [ 717.854050] loop6: detected capacity change from 0 to 40 [ 717.855754] FAT-fs (loop4): invalid media value (0x00) [ 717.856138] FAT-fs (loop4): Can't find a valid FAT filesystem [ 717.886741] FAULT_INJECTION: forcing a failure. [ 717.886741] name failslab, interval 1, probability 0, space 0, times 0 [ 717.888336] CPU: 1 PID: 5797 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 717.889359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 717.890395] Call Trace: [ 717.890739] [ 717.891045] dump_stack_lvl+0xc1/0xf0 [ 717.891582] should_fail_ex+0x4b4/0x5b0 [ 717.892124] ? vm_area_dup+0x20/0x160 [ 717.892651] should_failslab+0x9/0x20 [ 717.893161] kmem_cache_alloc+0x61/0x390 [ 717.893707] ? mas_destroy+0x216/0x8c0 [ 717.894249] vm_area_dup+0x20/0x160 [ 717.894755] __split_vma+0x173/0x770 [ 717.895291] ? __pfx___split_vma+0x10/0x10 [ 717.895889] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 717.896625] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 717.897405] ? mtree_range_walk+0x5c7/0x910 [ 717.898003] ? mas_walk+0x5c6/0x7c0 [ 717.898525] do_vmi_munmap+0x1e7/0x430 [ 717.899054] do_munmap+0xb1/0xf0 [ 717.899533] ? __pfx_do_munmap+0x10/0x10 [ 717.900086] ? rcu_read_lock_any_held+0x79/0xa0 [ 717.900730] ? vfs_write+0x155/0xda0 [ 717.901243] __do_sys_mremap+0x1326/0x1650 [ 717.901842] ? __pfx___do_sys_mremap+0x10/0x10 [ 717.902475] ? fput+0x2f/0x1a0 [ 717.902929] ? ksys_write+0x19e/0x250 [ 717.903461] ? __pfx_ksys_write+0x10/0x10 [ 717.904024] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 717.904735] do_syscall_64+0x3f/0x90 [ 717.905262] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 717.905949] RIP: 0033:0x7f950ebfeb19 [ 717.906450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 717.908734] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 717.909720] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 717.910634] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 717.911554] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 717.912463] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 717.913371] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 717.914312] 01:58:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:58:35 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 17) 01:58:35 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 23) 01:58:35 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:58:35 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 16) 01:58:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:58:35 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 17) [ 718.005884] loop6: detected capacity change from 0 to 40 [ 718.016593] loop4: detected capacity change from 0 to 39 [ 718.034887] FAT-fs (loop4): invalid media value (0x00) [ 718.035664] FAT-fs (loop4): Can't find a valid FAT filesystem 01:58:35 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 18) [ 718.104153] FAULT_INJECTION: forcing a failure. [ 718.104153] name failslab, interval 1, probability 0, space 0, times 0 [ 718.104972] CPU: 0 PID: 5816 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 718.105513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 718.106058] Call Trace: [ 718.106241] [ 718.106404] dump_stack_lvl+0xc1/0xf0 [ 718.106680] should_fail_ex+0x4b4/0x5b0 [ 718.106966] ? mas_alloc_nodes+0x4e7/0x890 [ 718.107276] should_failslab+0x9/0x20 [ 718.107551] kmem_cache_alloc+0x61/0x390 [ 718.107836] ? mas_prev_slot+0x393/0x11e0 [ 718.108137] mas_alloc_nodes+0x4e7/0x890 [ 718.108423] mas_preallocate+0x1bf/0x370 [ 718.108710] vma_merge+0x98e/0x1a60 [ 718.108976] ? __pfx_vma_merge+0x10/0x10 [ 718.109250] ? find_vma_prev+0xe8/0x160 [ 718.109528] ? __pfx_find_vma_prev+0x10/0x10 [ 718.109836] ? lock_release+0x1e3/0x680 [ 718.110127] copy_vma+0x25f/0xb50 [ 718.110385] ? __pfx_copy_vma+0x10/0x10 [ 718.110672] ? up_write+0x196/0x510 [ 718.110939] ? lock_is_held_type+0x9f/0x120 [ 718.111246] move_vma.constprop.0+0x5b4/0x1ba0 [ 718.111582] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 718.111930] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 718.112338] ? __pfx_do_munmap+0x10/0x10 [ 718.112622] ? may_expand_vm.part.0+0x1c5/0x340 [ 718.112945] ? cap_mmap_addr+0x54/0x310 [ 718.113230] ? selinux_mmap_addr+0x2d/0x110 [ 718.113528] ? security_mmap_addr+0x7d/0xa0 [ 718.113842] __do_sys_mremap+0x94e/0x1650 [ 718.114139] ? __pfx___do_sys_mremap+0x10/0x10 [ 718.114485] ? perf_trace_preemptirq_template+0x252/0x420 [ 718.114868] ? fput+0x2f/0x1a0 [ 718.115128] ? __pfx_ksys_write+0x10/0x10 [ 718.115441] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 718.115834] do_syscall_64+0x3f/0x90 [ 718.116101] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 718.116488] RIP: 0033:0x7f68713cdb19 [ 718.116750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 718.118000] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 718.118555] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 718.119079] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 718.119584] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 718.120102] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 718.120622] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 718.121157] 01:58:35 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 4) 01:58:35 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:58:35 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 18) 01:58:35 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 24) [ 718.162053] loop6: detected capacity change from 0 to 40 01:58:35 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 17) [ 718.193593] FAULT_INJECTION: forcing a failure. [ 718.193593] name failslab, interval 1, probability 0, space 0, times 0 [ 718.195076] CPU: 1 PID: 5822 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 718.196148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 718.197197] Call Trace: [ 718.197549] [ 718.197859] dump_stack_lvl+0xc1/0xf0 [ 718.198390] should_fail_ex+0x4b4/0x5b0 [ 718.198930] ? mas_alloc_nodes+0x4e7/0x890 [ 718.199504] should_failslab+0x9/0x20 [ 718.200021] kmem_cache_alloc+0x61/0x390 [ 718.200573] ? mas_prev_slot+0x393/0x11e0 [ 718.201142] mas_alloc_nodes+0x4e7/0x890 [ 718.201701] mas_preallocate+0x1bf/0x370 [ 718.202261] vma_merge+0x98e/0x1a60 [ 718.202778] ? __pfx_vma_merge+0x10/0x10 [ 718.203342] ? find_vma_prev+0xe8/0x160 [ 718.203884] ? __pfx_find_vma_prev+0x10/0x10 [ 718.204477] ? lock_release+0x1e3/0x680 [ 718.205044] copy_vma+0x25f/0xb50 [ 718.205547] ? __pfx_copy_vma+0x10/0x10 [ 718.206119] ? up_write+0x196/0x510 [ 718.206622] ? lock_is_held_type+0x9f/0x120 [ 718.207226] move_vma.constprop.0+0x5b4/0x1ba0 [ 718.207867] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 718.208542] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 718.209319] ? __pfx_do_munmap+0x10/0x10 [ 718.209861] ? may_expand_vm.part.0+0x1c5/0x340 [ 718.210478] ? cap_mmap_addr+0x54/0x310 [ 718.211038] ? selinux_mmap_addr+0x2d/0x110 [ 718.211625] ? security_mmap_addr+0x7d/0xa0 [ 718.212234] __do_sys_mremap+0x94e/0x1650 [ 718.212810] ? __pfx___do_sys_mremap+0x10/0x10 [ 718.213453] ? fput+0x2f/0x1a0 [ 718.213903] ? ksys_write+0x19e/0x250 [ 718.214433] ? __pfx_ksys_write+0x10/0x10 [ 718.215007] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 718.215735] do_syscall_64+0x3f/0x90 [ 718.216260] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 718.216962] RIP: 0033:0x7f5b71e1fb19 [ 718.217469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 718.219798] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 718.220797] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 718.221730] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 718.222666] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 718.223621] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 718.224556] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 718.225519] 01:58:48 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 19) 01:58:48 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 18) 01:58:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xdc, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:58:48 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 5) 01:58:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:58:48 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:58:48 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 19) 01:58:48 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 25) [ 731.097292] loop4: detected capacity change from 0 to 39 [ 731.098812] FAULT_INJECTION: forcing a failure. [ 731.098812] name failslab, interval 1, probability 0, space 0, times 0 [ 731.100246] CPU: 0 PID: 5839 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 731.101279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 731.101712] FAULT_INJECTION: forcing a failure. [ 731.101712] name failslab, interval 1, probability 0, space 0, times 0 [ 731.102308] Call Trace: [ 731.102317] [ 731.102327] dump_stack_lvl+0xc1/0xf0 [ 731.104777] should_fail_ex+0x4b4/0x5b0 [ 731.105310] ? vm_area_dup+0x52/0x160 [ 731.105817] should_failslab+0x9/0x20 [ 731.106318] kmem_cache_alloc+0x61/0x390 [ 731.106863] vm_area_dup+0x52/0x160 [ 731.107381] __split_vma+0x173/0x770 [ 731.107884] ? __pfx___split_vma+0x10/0x10 [ 731.108457] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 731.109190] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 731.109956] ? mtree_range_walk+0x5c7/0x910 [ 731.110518] ? mas_walk+0x5c6/0x7c0 [ 731.111018] do_vmi_munmap+0x1e7/0x430 [ 731.111544] do_munmap+0xb1/0xf0 [ 731.112001] ? __pfx_do_munmap+0x10/0x10 [ 731.112545] ? rcu_read_lock_any_held+0x79/0xa0 [ 731.113174] ? vfs_write+0x155/0xda0 [ 731.113678] __do_sys_mremap+0x1326/0x1650 [ 731.114254] ? __pfx___do_sys_mremap+0x10/0x10 [ 731.114854] ? perf_trace_preemptirq_template+0x252/0x420 [ 731.115595] ? fput+0x2f/0x1a0 [ 731.116040] ? __pfx_ksys_write+0x10/0x10 [ 731.116591] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 731.117287] do_syscall_64+0x3f/0x90 [ 731.117790] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 731.118470] RIP: 0033:0x7f950ebfeb19 [ 731.118955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 731.121197] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 731.122158] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 731.123067] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 731.123972] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 731.124882] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 731.125779] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 731.126697] [ 731.127016] CPU: 1 PID: 5841 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 731.128051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 731.129068] Call Trace: [ 731.129401] [ 731.129702] dump_stack_lvl+0xc1/0xf0 [ 731.130202] should_fail_ex+0x4b4/0x5b0 [ 731.130735] ? mas_alloc_nodes+0x4e7/0x890 [ 731.131293] should_failslab+0x9/0x20 [ 731.131803] kmem_cache_alloc+0x61/0x390 [ 731.132334] ? mas_prev_slot+0x393/0x11e0 [ 731.132883] mas_alloc_nodes+0x4e7/0x890 [ 731.133421] mas_preallocate+0x1bf/0x370 [ 731.133961] vma_merge+0x98e/0x1a60 [ 731.134444] ? __pfx_vma_merge+0x10/0x10 [ 731.134968] ? find_vma_prev+0xe8/0x160 [ 731.135491] ? __pfx_find_vma_prev+0x10/0x10 [ 731.136067] ? lock_release+0x1e3/0x680 [ 731.136610] copy_vma+0x25f/0xb50 [ 731.136936] loop6: detected capacity change from 0 to 40 [ 731.137075] ? __pfx_copy_vma+0x10/0x10 [ 731.138252] ? up_write+0x196/0x510 [ 731.138740] ? lock_is_held_type+0x9f/0x120 [ 731.139295] move_vma.constprop.0+0x5b4/0x1ba0 [ 731.139920] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 731.140580] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 731.141348] ? __pfx_do_munmap+0x10/0x10 [ 731.141869] ? may_expand_vm.part.0+0x1c5/0x340 [ 731.142464] ? cap_mmap_addr+0x54/0x310 [ 731.143002] ? selinux_mmap_addr+0x2d/0x110 [ 731.143572] ? security_mmap_addr+0x7d/0xa0 [ 731.144148] __do_sys_mremap+0x94e/0x1650 [ 731.144708] ? __pfx___do_sys_mremap+0x10/0x10 [ 731.145317] ? fput+0x2f/0x1a0 [ 731.145752] ? ksys_write+0x19e/0x250 [ 731.146248] ? __pfx_ksys_write+0x10/0x10 [ 731.146785] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 731.147470] do_syscall_64+0x3f/0x90 [ 731.147959] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 731.148618] RIP: 0033:0x7f073098bb19 [ 731.149093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 731.151290] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 731.152249] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 731.153140] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 731.154018] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 731.154909] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 731.155827] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 731.156771] [ 731.157136] FAT-fs (loop4): invalid media value (0x00) [ 731.157965] FAT-fs (loop4): Can't find a valid FAT filesystem 01:58:48 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 26) 01:58:48 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 20) 01:58:48 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 20) 01:58:48 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 731.285562] FAULT_INJECTION: forcing a failure. [ 731.285562] name failslab, interval 1, probability 0, space 0, times 0 [ 731.287049] CPU: 1 PID: 5851 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 731.288078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 731.289113] Call Trace: [ 731.289459] [ 731.289763] dump_stack_lvl+0xc1/0xf0 [ 731.290278] should_fail_ex+0x4b4/0x5b0 [ 731.290814] should_failslab+0x9/0x20 [ 731.291327] kmem_cache_alloc_bulk+0x6b/0x630 [ 731.291959] ? kmem_cache_alloc+0x328/0x390 [ 731.292527] ? mas_prev_slot+0x393/0x11e0 [ 731.293092] mas_alloc_nodes+0x337/0x890 [ 731.293638] mas_preallocate+0x1bf/0x370 [ 731.294184] vma_merge+0x98e/0x1a60 [ 731.294681] ? __pfx_vma_merge+0x10/0x10 [ 731.295207] ? find_vma_prev+0xe8/0x160 [ 731.295718] ? __pfx_find_vma_prev+0x10/0x10 [ 731.296287] ? lock_release+0x1e3/0x680 [ 731.296836] copy_vma+0x25f/0xb50 [ 731.297323] ? __pfx_copy_vma+0x10/0x10 [ 731.297870] ? up_write+0x196/0x510 [ 731.298365] ? lock_is_held_type+0x9f/0x120 [ 731.298933] move_vma.constprop.0+0x5b4/0x1ba0 [ 731.299565] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 731.300215] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 731.300987] ? __pfx_do_munmap+0x10/0x10 [ 731.301521] ? may_expand_vm.part.0+0x1c5/0x340 [ 731.302123] ? cap_mmap_addr+0x54/0x310 [ 731.302665] ? selinux_mmap_addr+0x2d/0x110 [ 731.303230] ? security_mmap_addr+0x7d/0xa0 [ 731.303839] __do_sys_mremap+0x94e/0x1650 [ 731.304399] ? __pfx___do_sys_mremap+0x10/0x10 [ 731.305019] ? fput+0x2f/0x1a0 [ 731.305447] ? ksys_write+0x19e/0x250 [ 731.305956] ? __pfx_ksys_write+0x10/0x10 [ 731.306497] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 731.307179] do_syscall_64+0x3f/0x90 [ 731.307686] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 731.308365] RIP: 0033:0x7f68713cdb19 [ 731.308843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 731.311081] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 731.312045] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 731.312947] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 731.313844] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 731.314730] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 731.315650] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 731.316564] [ 731.325319] FAULT_INJECTION: forcing a failure. [ 731.325319] name failslab, interval 1, probability 0, space 0, times 0 [ 731.326770] CPU: 0 PID: 5854 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 731.327813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 731.328834] Call Trace: [ 731.329176] [ 731.329478] dump_stack_lvl+0xc1/0xf0 [ 731.329990] should_fail_ex+0x4b4/0x5b0 [ 731.330523] should_failslab+0x9/0x20 [ 731.331030] kmem_cache_alloc_bulk+0x6b/0x630 [ 731.331632] ? kmem_cache_alloc+0x328/0x390 [ 731.332198] ? mas_prev_slot+0x393/0x11e0 [ 731.332753] mas_alloc_nodes+0x337/0x890 [ 731.333296] mas_preallocate+0x1bf/0x370 [ 731.333839] vma_merge+0x98e/0x1a60 [ 731.334330] ? __pfx_vma_merge+0x10/0x10 [ 731.334854] ? find_vma_prev+0xe8/0x160 [ 731.335382] ? __pfx_find_vma_prev+0x10/0x10 [ 731.335957] ? lock_release+0x1e3/0x680 [ 731.336506] copy_vma+0x25f/0xb50 [ 731.336987] ? __pfx_copy_vma+0x10/0x10 [ 731.337533] ? up_write+0x196/0x510 [ 731.338017] ? lock_is_held_type+0x9f/0x120 [ 731.338579] move_vma.constprop.0+0x5b4/0x1ba0 [ 731.339199] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 731.339874] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 731.340642] ? __pfx_do_munmap+0x10/0x10 [ 731.341177] ? may_expand_vm.part.0+0x1c5/0x340 [ 731.341770] ? cap_mmap_addr+0x54/0x310 [ 731.342310] ? selinux_mmap_addr+0x2d/0x110 [ 731.342878] ? security_mmap_addr+0x7d/0xa0 [ 731.343471] __do_sys_mremap+0x94e/0x1650 [ 731.344044] ? __pfx___do_sys_mremap+0x10/0x10 [ 731.344648] ? perf_trace_preemptirq_template+0x252/0x420 [ 731.345378] ? fput+0x2f/0x1a0 [ 731.345825] ? __pfx_ksys_write+0x10/0x10 [ 731.346372] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 731.347050] do_syscall_64+0x3f/0x90 [ 731.347552] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 731.348223] RIP: 0033:0x7f5b71e1fb19 [ 731.348704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 731.350934] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 731.351898] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 731.352786] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 731.353677] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 731.354565] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 731.355459] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 731.356378] 01:58:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:58:48 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 19) 01:58:48 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 6) [ 731.400210] loop6: detected capacity change from 0 to 40 01:59:00 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 7) 01:59:00 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 20) 01:59:00 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 27) 01:59:00 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 21) 01:59:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:59:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:59:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:59:00 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 21) [ 742.840116] FAULT_INJECTION: forcing a failure. [ 742.840116] name failslab, interval 1, probability 0, space 0, times 0 [ 742.840956] CPU: 1 PID: 5872 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 742.841493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 742.842023] Call Trace: [ 742.842198] [ 742.842360] dump_stack_lvl+0xc1/0xf0 [ 742.842632] should_fail_ex+0x4b4/0x5b0 [ 742.842912] ? mas_alloc_nodes+0x4e7/0x890 [ 742.843202] should_failslab+0x9/0x20 [ 742.843470] kmem_cache_alloc+0x61/0x390 [ 742.843773] mas_alloc_nodes+0x4e7/0x890 [ 742.844059] mas_preallocate+0x1bf/0x370 [ 742.844347] __split_vma+0x191/0x770 [ 742.844611] ? __pfx___split_vma+0x10/0x10 [ 742.844907] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 742.845285] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 742.845690] ? mtree_range_walk+0x5c7/0x910 [ 742.845996] ? mas_walk+0x5c6/0x7c0 [ 742.846262] do_vmi_munmap+0x1e7/0x430 [ 742.846533] do_munmap+0xb1/0xf0 [ 742.846771] ? __pfx_do_munmap+0x10/0x10 [ 742.847054] ? rcu_read_lock_any_held+0x79/0xa0 [ 742.847393] ? vfs_write+0x155/0xda0 [ 742.847661] __do_sys_mremap+0x1326/0x1650 [ 742.847960] ? __pfx___do_sys_mremap+0x10/0x10 [ 742.848284] ? fput+0x2f/0x1a0 [ 742.848520] ? ksys_write+0x19e/0x250 [ 742.848784] ? __pfx_ksys_write+0x10/0x10 [ 742.849065] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 742.849429] do_syscall_64+0x3f/0x90 [ 742.849708] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 742.850086] RIP: 0033:0x7f950ebfeb19 [ 742.850339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 742.850704] loop4: detected capacity change from 0 to 39 [ 742.851578] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 742.851597] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 742.851608] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 742.851619] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 742.854204] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 742.854704] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 742.855214] [ 742.855988] FAULT_INJECTION: forcing a failure. [ 742.855988] name failslab, interval 1, probability 0, space 0, times 0 [ 742.857372] CPU: 0 PID: 5876 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 742.858355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 742.859328] Call Trace: [ 742.859656] [ 742.859942] dump_stack_lvl+0xc1/0xf0 [ 742.860443] should_fail_ex+0x4b4/0x5b0 [ 742.860946] FAULT_INJECTION: forcing a failure. [ 742.860946] name failslab, interval 1, probability 0, space 0, times 0 [ 742.860954] ? vm_area_dup+0x20/0x160 [ 742.862161] should_failslab+0x9/0x20 [ 742.862647] kmem_cache_alloc+0x61/0x390 [ 742.863173] ? __pfx_lock_acquire+0x10/0x10 [ 742.863736] vm_area_dup+0x20/0x160 [ 742.864210] __split_vma+0x173/0x770 [ 742.864701] ? lock_release+0x1e3/0x680 [ 742.865208] ? __pfx___split_vma+0x10/0x10 [ 742.865740] ? __pfx_lock_release+0x10/0x10 [ 742.866281] ? move_page_tables.part.0+0x98f/0x1f10 [ 742.866926] ? __pfx_lock_release+0x10/0x10 [ 742.867527] ? pte_offset_map_nolock+0x129/0x1e0 [ 742.868151] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 742.868852] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 742.869578] ? mtree_range_walk+0x5c7/0x910 [ 742.870136] ? mas_walk+0x5c6/0x7c0 [ 742.870621] do_vmi_munmap+0x1e7/0x430 [ 742.871118] move_vma.constprop.0+0x88a/0x1ba0 [ 742.871730] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 742.872355] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 742.873092] ? selinux_mmap_addr+0x2d/0x110 [ 742.873635] ? security_mmap_addr+0x7d/0xa0 [ 742.874200] __do_sys_mremap+0x94e/0x1650 [ 742.874744] ? __pfx___do_sys_mremap+0x10/0x10 [ 742.875333] ? perf_trace_preemptirq_template+0x252/0x420 [ 742.876035] ? fput+0x2f/0x1a0 [ 742.876468] ? __pfx_ksys_write+0x10/0x10 [ 742.876999] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 742.877649] do_syscall_64+0x3f/0x90 [ 742.878138] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 742.878776] RIP: 0033:0x7f8595db6b19 [ 742.879237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 742.881430] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 742.882354] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 742.883206] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 742.884066] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 742.884920] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 742.885772] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 742.886641] [ 742.886941] CPU: 1 PID: 5879 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 742.887597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 742.888160] Call Trace: [ 742.888346] [ 742.888514] dump_stack_lvl+0xc1/0xf0 [ 742.888791] should_fail_ex+0x4b4/0x5b0 [ 742.889083] should_failslab+0x9/0x20 [ 742.889346] kmem_cache_alloc_bulk+0x6b/0x630 [ 742.889677] ? kmem_cache_alloc+0x328/0x390 [ 742.889968] ? mas_prev_slot+0x393/0x11e0 [ 742.890277] mas_alloc_nodes+0x337/0x890 [ 742.890561] mas_preallocate+0x1bf/0x370 [ 742.890863] vma_merge+0x98e/0x1a60 [ 742.891119] ? __pfx_vma_merge+0x10/0x10 [ 742.891410] ? find_vma_prev+0xe8/0x160 [ 742.891692] ? __pfx_find_vma_prev+0x10/0x10 [ 742.892006] ? lock_release+0x1e3/0x680 [ 742.892290] copy_vma+0x25f/0xb50 [ 742.892560] ? __pfx_copy_vma+0x10/0x10 [ 742.892841] ? up_write+0x196/0x510 [ 742.893110] ? lock_is_held_type+0x9f/0x120 [ 742.893408] move_vma.constprop.0+0x5b4/0x1ba0 [ 742.893752] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 742.894091] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 742.894515] ? __pfx_do_munmap+0x10/0x10 [ 742.894789] ? may_expand_vm.part.0+0x1c5/0x340 [ 742.895125] ? cap_mmap_addr+0x54/0x310 [ 742.895406] ? selinux_mmap_addr+0x2d/0x110 [ 742.895719] ? security_mmap_addr+0x7d/0xa0 [ 742.896022] __do_sys_mremap+0x94e/0x1650 [ 742.896332] ? __pfx___do_sys_mremap+0x10/0x10 [ 742.896656] ? fput+0x2f/0x1a0 [ 742.896896] ? ksys_write+0x19e/0x250 [ 742.897158] ? __pfx_ksys_write+0x10/0x10 [ 742.897459] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 742.897809] do_syscall_64+0x3f/0x90 [ 742.898087] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 742.898441] RIP: 0033:0x7f073098bb19 [ 742.898708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 742.899855] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 742.900377] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 742.900862] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 742.901353] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 742.901842] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 742.902330] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 742.902833] [ 742.905717] loop6: detected capacity change from 0 to 40 [ 742.915723] FAT-fs (loop4): invalid media value (0x00) [ 742.916438] FAT-fs (loop4): Can't find a valid FAT filesystem 01:59:00 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 22) 01:59:00 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 22) 01:59:00 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 8) 01:59:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:59:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 01:59:00 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 9) 01:59:00 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 21) 01:59:00 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 23) 01:59:00 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 28) [ 743.095749] loop6: detected capacity change from 0 to 40 [ 743.119107] FAULT_INJECTION: forcing a failure. [ 743.119107] name failslab, interval 1, probability 0, space 0, times 0 [ 743.119982] CPU: 1 PID: 5901 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 743.120544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 743.121112] Call Trace: [ 743.121295] [ 743.121461] dump_stack_lvl+0xc1/0xf0 [ 743.121723] FAULT_INJECTION: forcing a failure. [ 743.121723] name failslab, interval 1, probability 0, space 0, times 0 [ 743.121750] should_fail_ex+0x4b4/0x5b0 [ 743.123438] should_failslab+0x9/0x20 [ 743.123723] kmem_cache_alloc_bulk+0x6b/0x630 [ 743.124057] ? kmem_cache_alloc+0x328/0x390 [ 743.124366] ? mas_prev_slot+0x393/0x11e0 [ 743.124672] mas_alloc_nodes+0x337/0x890 [ 743.124971] mas_preallocate+0x1bf/0x370 [ 743.125252] vma_merge+0x98e/0x1a60 [ 743.125525] ? __pfx_vma_merge+0x10/0x10 [ 743.125816] ? find_vma_prev+0xe8/0x160 [ 743.126104] ? __pfx_find_vma_prev+0x10/0x10 [ 743.126423] ? lock_release+0x1e3/0x680 [ 743.126723] copy_vma+0x25f/0xb50 [ 743.126984] ? __pfx_copy_vma+0x10/0x10 [ 743.127281] ? up_write+0x196/0x510 [ 743.127555] ? lock_is_held_type+0x9f/0x120 [ 743.127863] move_vma.constprop.0+0x5b4/0x1ba0 [ 743.128204] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 743.128566] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 743.128988] ? __pfx_do_munmap+0x10/0x10 [ 743.129264] ? may_expand_vm.part.0+0x1c5/0x340 [ 743.129595] ? cap_mmap_addr+0x54/0x310 [ 743.129878] ? selinux_mmap_addr+0x2d/0x110 [ 743.130184] ? security_mmap_addr+0x7d/0xa0 [ 743.130488] __do_sys_mremap+0x94e/0x1650 [ 743.130797] ? __pfx___do_sys_mremap+0x10/0x10 [ 743.131123] ? fput+0x2f/0x1a0 [ 743.131378] ? ksys_write+0x19e/0x250 [ 743.131645] ? __pfx_ksys_write+0x10/0x10 [ 743.131946] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 743.132301] do_syscall_64+0x3f/0x90 [ 743.132574] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 743.132926] RIP: 0033:0x7f073098bb19 [ 743.133194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 743.134360] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 743.134889] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 743.135343] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 743.135842] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 743.136330] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 743.136821] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 743.137334] [ 743.137505] CPU: 0 PID: 5897 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 743.138712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 743.139894] Call Trace: [ 743.140281] [ 743.140629] dump_stack_lvl+0xc1/0xf0 [ 743.141229] should_fail_ex+0x4b4/0x5b0 [ 743.141840] should_failslab+0x9/0x20 [ 743.142411] kmem_cache_alloc_bulk+0x6b/0x630 01:59:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 743.143107] ? kmem_cache_alloc+0x328/0x390 [ 743.143831] mas_alloc_nodes+0x337/0x890 [ 743.144419] mas_preallocate+0x1bf/0x370 [ 743.145026] __split_vma+0x191/0x770 [ 743.145557] ? __pfx___split_vma+0x10/0x10 [ 743.146214] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 743.146978] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 743.147856] ? mtree_range_walk+0x5c7/0x910 [ 743.148486] ? mas_walk+0x5c6/0x7c0 [ 743.149060] do_vmi_munmap+0x1e7/0x430 [ 743.149618] do_munmap+0xb1/0xf0 [ 743.150129] ? __pfx_do_munmap+0x10/0x10 [ 743.150716] ? rcu_read_lock_any_held+0x79/0xa0 [ 743.151406] ? vfs_write+0x155/0xda0 [ 743.151952] __do_sys_mremap+0x1326/0x1650 [ 743.152593] ? __pfx___do_sys_mremap+0x10/0x10 [ 743.153251] ? perf_trace_preemptirq_template+0x252/0x420 [ 743.154060] ? fput+0x2f/0x1a0 [ 743.154546] ? __pfx_ksys_write+0x10/0x10 [ 743.155154] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 743.155900] do_syscall_64+0x3f/0x90 [ 743.156456] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 743.157180] RIP: 0033:0x7f950ebfeb19 [ 743.157717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 743.160112] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 743.161177] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 743.162132] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 743.163122] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 743.164118] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 743.165106] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 743.166141] 01:59:00 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 24) 01:59:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 743.212601] FAULT_INJECTION: forcing a failure. [ 743.212601] name failslab, interval 1, probability 0, space 0, times 0 [ 743.213423] CPU: 1 PID: 5906 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 743.213982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 743.214534] Call Trace: [ 743.214711] [ 743.214874] dump_stack_lvl+0xc1/0xf0 [ 743.215142] should_fail_ex+0x4b4/0x5b0 [ 743.215426] ? vm_area_dup+0x20/0x160 [ 743.215707] should_failslab+0x9/0x20 [ 743.215982] kmem_cache_alloc+0x61/0x390 [ 743.216268] ? __pfx_lock_acquire+0x10/0x10 [ 743.216581] vm_area_dup+0x20/0x160 [ 743.216840] __split_vma+0x173/0x770 [ 743.217108] ? lock_release+0x1e3/0x680 [ 743.217393] ? __pfx___split_vma+0x10/0x10 [ 743.217684] ? __pfx_lock_release+0x10/0x10 [ 743.217975] ? move_page_tables.part.0+0x98f/0x1f10 [ 743.218323] ? __pfx_lock_release+0x10/0x10 [ 743.218620] ? pte_offset_map_nolock+0x129/0x1e0 [ 743.218954] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 743.219333] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 743.219746] ? mtree_range_walk+0x5c7/0x910 [ 743.220054] ? mas_walk+0x5c6/0x7c0 [ 743.220318] do_vmi_munmap+0x1e7/0x430 [ 743.220591] move_vma.constprop.0+0x88a/0x1ba0 [ 743.220917] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 743.221257] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 743.221658] ? selinux_mmap_addr+0x2d/0x110 [ 743.221949] ? security_mmap_addr+0x7d/0xa0 [ 743.222253] __do_sys_mremap+0x94e/0x1650 [ 743.222554] ? __pfx___do_sys_mremap+0x10/0x10 [ 743.222879] ? fput+0x2f/0x1a0 [ 743.223111] ? ksys_write+0x19e/0x250 [ 743.223381] ? __pfx_ksys_write+0x10/0x10 [ 743.223703] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 743.224055] do_syscall_64+0x3f/0x90 [ 743.224333] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 743.224703] RIP: 0033:0x7f8595db6b19 [ 743.224965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 743.226205] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 743.226733] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 743.227224] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 743.227725] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 743.228212] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 743.228704] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 743.229216] [ 743.277364] loop4: detected capacity change from 0 to 39 [ 743.279767] FAT-fs (loop4): invalid media value (0x00) [ 743.280231] FAT-fs (loop4): Can't find a valid FAT filesystem 01:59:12 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 23) 01:59:12 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 22) 01:59:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:59:12 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 29) 01:59:12 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 10) 01:59:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:59:12 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 25) 01:59:12 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 754.693287] loop4: detected capacity change from 0 to 39 [ 754.696994] loop6: detected capacity change from 0 to 40 [ 754.701838] FAT-fs (loop4): invalid media value (0x00) [ 754.702197] FAT-fs (loop4): Can't find a valid FAT filesystem 01:59:12 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 23) [ 754.735362] FAULT_INJECTION: forcing a failure. [ 754.735362] name failslab, interval 1, probability 0, space 0, times 0 [ 754.736986] CPU: 1 PID: 5931 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 754.738053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 754.739088] Call Trace: [ 754.739450] [ 754.739766] dump_stack_lvl+0xc1/0xf0 [ 754.740307] should_fail_ex+0x4b4/0x5b0 [ 754.740853] ? vm_area_dup+0x52/0x160 [ 754.741368] should_failslab+0x9/0x20 [ 754.741876] kmem_cache_alloc+0x61/0x390 [ 754.742449] vm_area_dup+0x52/0x160 [ 754.742946] __split_vma+0x173/0x770 [ 754.743447] ? lock_release+0x1e3/0x680 [ 754.744007] ? __pfx___split_vma+0x10/0x10 [ 754.744559] ? __pfx_lock_release+0x10/0x10 [ 754.745122] ? move_page_tables.part.0+0x98f/0x1f10 [ 754.745792] ? __pfx_lock_release+0x10/0x10 [ 754.746360] ? pte_offset_map_nolock+0x129/0x1e0 [ 754.747007] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 754.747761] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 754.748531] ? mtree_range_walk+0x5c7/0x910 [ 754.749123] ? mas_walk+0x5c6/0x7c0 [ 754.749631] do_vmi_munmap+0x1e7/0x430 [ 754.750156] move_vma.constprop.0+0x88a/0x1ba0 [ 754.750785] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 754.751449] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 754.752253] ? selinux_mmap_addr+0x2d/0x110 [ 754.752843] ? security_mmap_addr+0x7d/0xa0 [ 754.753451] __do_sys_mremap+0x94e/0x1650 [ 754.754032] ? __pfx___do_sys_mremap+0x10/0x10 [ 754.754664] ? fput+0x2f/0x1a0 [ 754.755130] ? ksys_write+0x19e/0x250 [ 754.755664] ? __pfx_ksys_write+0x10/0x10 [ 754.756229] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 754.756934] do_syscall_64+0x3f/0x90 [ 754.757446] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 754.758133] RIP: 0033:0x7f8595db6b19 [ 754.758624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.760891] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 754.761867] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 754.762794] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 754.763706] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 754.764625] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 754.765533] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 754.766473] 01:59:12 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 11) 01:59:24 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 26) 01:59:24 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 24) 01:59:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x900, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:59:24 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 12) 01:59:24 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 24) 01:59:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:59:24 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 30) 01:59:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/162, 0xa2) [ 767.138698] loop6: detected capacity change from 0 to 40 [ 767.141481] loop4: detected capacity change from 0 to 39 [ 767.147979] FAT-fs (loop4): bogus number of FAT sectors [ 767.148447] FAT-fs (loop4): Can't find a valid FAT filesystem 01:59:24 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 31) 01:59:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/162, 0xa2) [ 767.232641] loop6: detected capacity change from 0 to 40 [ 767.237879] FAULT_INJECTION: forcing a failure. [ 767.237879] name failslab, interval 1, probability 0, space 0, times 0 [ 767.238768] CPU: 0 PID: 5959 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 767.239328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.239894] Call Trace: [ 767.240083] [ 767.240247] dump_stack_lvl+0xc1/0xf0 [ 767.240531] should_fail_ex+0x4b4/0x5b0 [ 767.240822] ? mas_alloc_nodes+0x4e7/0x890 [ 767.241121] should_failslab+0x9/0x20 01:59:24 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 25) 01:59:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 767.241395] kmem_cache_alloc+0x61/0x390 [ 767.241809] mas_alloc_nodes+0x4e7/0x890 [ 767.242120] mas_preallocate+0x1bf/0x370 [ 767.242418] __split_vma+0x191/0x770 [ 767.242685] ? lock_release+0x1e3/0x680 [ 767.242980] ? __pfx___split_vma+0x10/0x10 [ 767.243278] ? __pfx_lock_release+0x10/0x10 [ 767.243559] ? move_page_tables.part.0+0x98f/0x1f10 [ 767.243944] ? __pfx_lock_release+0x10/0x10 [ 767.244251] ? pte_offset_map_nolock+0x129/0x1e0 [ 767.244602] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 767.244995] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 767.245416] ? mtree_range_walk+0x5c7/0x910 [ 767.245737] ? mas_walk+0x5c6/0x7c0 [ 767.246015] do_vmi_munmap+0x1e7/0x430 [ 767.246300] move_vma.constprop.0+0x88a/0x1ba0 [ 767.246643] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 767.247000] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 767.247380] ? selinux_mmap_addr+0x2d/0x110 [ 767.247688] ? security_mmap_addr+0x7d/0xa0 [ 767.248022] __do_sys_mremap+0x94e/0x1650 [ 767.248332] ? __pfx___do_sys_mremap+0x10/0x10 [ 767.248669] ? perf_trace_preemptirq_template+0x252/0x420 [ 767.249071] ? fput+0x2f/0x1a0 [ 767.249323] ? __pfx_ksys_write+0x10/0x10 [ 767.249627] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 767.250003] do_syscall_64+0x3f/0x90 [ 767.250251] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 767.250624] RIP: 0033:0x7f8595db6b19 [ 767.250886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.252139] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 767.252661] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 767.253157] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 767.253648] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 767.254132] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 767.254618] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 767.255129] [ 767.273380] loop4: detected capacity change from 0 to 39 [ 767.277342] FAT-fs (loop4): bogus number of FAT sectors [ 767.277750] FAT-fs (loop4): Can't find a valid FAT filesystem 01:59:24 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 25) 01:59:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/162, 0xa2) 01:59:24 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 13) 01:59:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xf00, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:59:24 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 27) [ 767.375489] loop6: detected capacity change from 0 to 40 [ 767.415485] FAULT_INJECTION: forcing a failure. [ 767.415485] name failslab, interval 1, probability 0, space 0, times 0 [ 767.417071] CPU: 1 PID: 5975 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 767.418155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.419240] Call Trace: [ 767.419598] [ 767.419949] dump_stack_lvl+0xc1/0xf0 [ 767.420492] should_fail_ex+0x4b4/0x5b0 [ 767.421064] ? vm_area_dup+0x20/0x160 [ 767.421613] should_failslab+0x9/0x20 [ 767.422148] kmem_cache_alloc+0x61/0x390 [ 767.422728] ? __pfx_lock_acquire+0x10/0x10 [ 767.423336] vm_area_dup+0x20/0x160 [ 767.423884] __split_vma+0x173/0x770 [ 767.424414] ? lock_release+0x1e3/0x680 [ 767.424971] ? __pfx___split_vma+0x10/0x10 [ 767.425527] ? __pfx_lock_release+0x10/0x10 [ 767.426126] ? move_page_tables.part.0+0x98f/0x1f10 [ 767.426827] ? __pfx_lock_release+0x10/0x10 [ 767.427423] ? pte_offset_map_nolock+0x129/0x1e0 [ 767.428149] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 767.428913] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 767.429724] ? mtree_range_walk+0x5c7/0x910 [ 767.430347] ? mas_walk+0x5c6/0x7c0 [ 767.430881] do_vmi_munmap+0x1e7/0x430 [ 767.431431] move_vma.constprop.0+0x88a/0x1ba0 [ 767.432122] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 767.432816] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 767.433637] ? selinux_mmap_addr+0x2d/0x110 [ 767.434237] ? security_mmap_addr+0x7d/0xa0 [ 767.434859] __do_sys_mremap+0x94e/0x1650 [ 767.435455] ? __pfx___do_sys_mremap+0x10/0x10 [ 767.436137] ? fput+0x2f/0x1a0 [ 767.436608] ? ksys_write+0x19e/0x250 [ 767.437143] ? __pfx_ksys_write+0x10/0x10 [ 767.437720] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 767.438446] do_syscall_64+0x3f/0x90 [ 767.438970] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 767.439681] RIP: 0033:0x7f68713cdb19 [ 767.440271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.442658] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 767.443672] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 767.444646] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 767.445676] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 767.446728] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 767.447777] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 767.448874] 01:59:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x2000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:59:39 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 28) 01:59:39 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, 0x0, 0x0) 01:59:39 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 26) 01:59:39 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 14) 01:59:39 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 26) 01:59:39 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 32) 01:59:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:59:39 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 27) [ 782.380202] loop6: detected capacity change from 0 to 40 [ 782.406443] FAULT_INJECTION: forcing a failure. [ 782.406443] name failslab, interval 1, probability 0, space 0, times 0 [ 782.407214] CPU: 1 PID: 5994 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 782.407751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 782.408303] Call Trace: [ 782.408484] [ 782.408652] dump_stack_lvl+0xc1/0xf0 [ 782.408929] should_fail_ex+0x4b4/0x5b0 [ 782.409226] ? vm_area_dup+0x20/0x160 [ 782.409502] should_failslab+0x9/0x20 [ 782.409777] kmem_cache_alloc+0x61/0x390 [ 782.410066] ? __pfx_lock_acquire+0x10/0x10 [ 782.410380] vm_area_dup+0x20/0x160 [ 782.410651] __split_vma+0x173/0x770 [ 782.410921] ? lock_release+0x1e3/0x680 [ 782.411203] ? __pfx___split_vma+0x10/0x10 [ 782.411528] ? __pfx_lock_release+0x10/0x10 [ 782.411832] ? move_page_tables.part.0+0x98f/0x1f10 [ 782.412213] ? __pfx_lock_release+0x10/0x10 [ 782.412525] ? pte_offset_map_nolock+0x129/0x1e0 [ 782.412865] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 782.413251] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 782.413656] ? mtree_range_walk+0x5c7/0x910 [ 782.413972] ? mas_walk+0x5c6/0x7c0 [ 782.414244] do_vmi_munmap+0x1e7/0x430 [ 782.414518] move_vma.constprop.0+0x88a/0x1ba0 [ 782.414883] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 782.415268] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 782.415465] loop4: detected capacity change from 0 to 39 [ 782.415706] ? selinux_mmap_addr+0x2d/0x110 [ 782.416785] ? security_mmap_addr+0x7d/0xa0 [ 782.417126] __do_sys_mremap+0x94e/0x1650 [ 782.417453] ? __pfx___do_sys_mremap+0x10/0x10 [ 782.417818] ? fput+0x2f/0x1a0 [ 782.418078] ? ksys_write+0x19e/0x250 [ 782.418367] ? __pfx_ksys_write+0x10/0x10 [ 782.418679] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 782.419065] do_syscall_64+0x3f/0x90 [ 782.419363] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 782.419754] RIP: 0033:0x7f073098bb19 [ 782.420033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.421330] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 782.421878] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 782.422392] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 782.422907] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 782.423402] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 782.423915] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 782.424446] [ 782.435969] FAT-fs (loop4): bogus number of FAT sectors [ 782.436766] FAT-fs (loop4): Can't find a valid FAT filesystem 01:59:40 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 29) 01:59:40 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 27) [ 782.479242] FAULT_INJECTION: forcing a failure. [ 782.479242] name failslab, interval 1, probability 0, space 0, times 0 [ 782.480249] CPU: 1 PID: 6001 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 782.480821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 782.481367] Call Trace: [ 782.481550] [ 782.481715] dump_stack_lvl+0xc1/0xf0 [ 782.481996] should_fail_ex+0x4b4/0x5b0 [ 782.482282] ? vm_area_dup+0x52/0x160 [ 782.482563] should_failslab+0x9/0x20 [ 782.482837] kmem_cache_alloc+0x61/0x390 [ 782.483131] vm_area_dup+0x52/0x160 [ 782.483410] __split_vma+0x173/0x770 [ 782.483688] ? lock_release+0x1e3/0x680 [ 782.483970] ? __pfx___split_vma+0x10/0x10 [ 782.484297] ? __pfx_lock_release+0x10/0x10 [ 782.484648] ? move_page_tables.part.0+0x98f/0x1f10 [ 782.485160] ? __pfx_lock_release+0x10/0x10 [ 782.485460] ? pte_offset_map_nolock+0x129/0x1e0 [ 782.485796] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 782.486185] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 782.486584] ? mtree_range_walk+0x5c7/0x910 [ 782.486900] ? mas_walk+0x5c6/0x7c0 [ 782.487165] do_vmi_munmap+0x1e7/0x430 [ 782.487444] move_vma.constprop.0+0x88a/0x1ba0 [ 782.487790] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 782.488154] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 782.488593] ? selinux_mmap_addr+0x2d/0x110 [ 782.488917] ? security_mmap_addr+0x7d/0xa0 [ 782.489251] __do_sys_mremap+0x94e/0x1650 [ 782.489574] ? __pfx___do_sys_mremap+0x10/0x10 [ 782.489940] ? fput+0x2f/0x1a0 [ 782.490191] ? ksys_write+0x19e/0x250 [ 782.490479] ? __pfx_ksys_write+0x10/0x10 [ 782.490794] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 782.491181] do_syscall_64+0x3f/0x90 [ 782.491471] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 782.491853] RIP: 0033:0x7f68713cdb19 [ 782.492156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.493426] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 782.493971] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 782.494486] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 782.494993] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 782.495522] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 782.496043] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 782.496572] [ 782.501653] FAULT_INJECTION: forcing a failure. [ 782.501653] name failslab, interval 1, probability 0, space 0, times 0 [ 782.502483] CPU: 1 PID: 6002 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 782.503061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 782.503638] Call Trace: [ 782.503830] [ 782.504006] dump_stack_lvl+0xc1/0xf0 [ 782.504291] should_fail_ex+0x4b4/0x5b0 [ 782.504598] ? vm_area_dup+0x20/0x160 [ 782.504890] should_failslab+0x9/0x20 [ 782.505177] kmem_cache_alloc+0x61/0x390 [ 782.505487] ? __pfx_lock_acquire+0x10/0x10 [ 782.505782] vm_area_dup+0x20/0x160 [ 782.506040] __split_vma+0x173/0x770 [ 782.506320] ? lock_release+0x1e3/0x680 [ 782.506593] ? __pfx___split_vma+0x10/0x10 [ 782.506891] ? __pfx_lock_release+0x10/0x10 [ 782.507187] ? move_page_tables.part.0+0x98f/0x1f10 [ 782.507537] ? __pfx_lock_release+0x10/0x10 [ 782.507840] ? pte_offset_map_nolock+0x129/0x1e0 [ 782.508186] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 782.508562] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 782.508958] ? mtree_range_walk+0x5c7/0x910 [ 782.509271] ? mas_walk+0x5c6/0x7c0 [ 782.509543] do_vmi_munmap+0x1e7/0x430 [ 782.509818] move_vma.constprop.0+0x88a/0x1ba0 [ 782.510145] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 782.510486] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 782.510893] ? selinux_mmap_addr+0x2d/0x110 [ 782.511204] ? security_mmap_addr+0x7d/0xa0 [ 782.511507] __do_sys_mremap+0x94e/0x1650 [ 782.511812] ? __pfx___do_sys_mremap+0x10/0x10 [ 782.512157] ? fput+0x2f/0x1a0 [ 782.512389] ? ksys_write+0x19e/0x250 [ 782.512657] ? __pfx_ksys_write+0x10/0x10 [ 782.512938] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 782.513292] do_syscall_64+0x3f/0x90 [ 782.513566] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 782.513919] RIP: 0033:0x7f5b71e1fb19 [ 782.514169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.515397] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 782.515914] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 782.516402] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 782.516894] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 782.517400] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 782.517903] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 782.518416] 01:59:40 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, 0x0, 0x0) 01:59:40 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 15) 01:59:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xdc00, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:59:40 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 33) 01:59:40 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 28) 01:59:40 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 16) 01:59:40 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 30) [ 782.646918] loop6: detected capacity change from 0 to 40 [ 782.700361] FAULT_INJECTION: forcing a failure. [ 782.700361] name failslab, interval 1, probability 0, space 0, times 0 [ 782.701137] CPU: 1 PID: 6017 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 782.701676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 782.702205] Call Trace: [ 782.702385] [ 782.702547] dump_stack_lvl+0xc1/0xf0 [ 782.702831] should_fail_ex+0x4b4/0x5b0 [ 782.703110] should_failslab+0x9/0x20 [ 782.703374] kmem_cache_alloc_bulk+0x6b/0x630 [ 782.703686] ? kmem_cache_alloc+0x328/0x390 [ 782.703996] mas_alloc_nodes+0x337/0x890 [ 782.704291] mas_preallocate+0x1bf/0x370 [ 782.704577] __split_vma+0x191/0x770 [ 782.704842] ? lock_release+0x1e3/0x680 [ 782.705120] ? __pfx___split_vma+0x10/0x10 [ 782.705416] ? __pfx_lock_release+0x10/0x10 [ 782.705711] ? move_page_tables.part.0+0x98f/0x1f10 [ 782.706058] ? __pfx_lock_release+0x10/0x10 [ 782.706355] ? pte_offset_map_nolock+0x129/0x1e0 [ 782.706688] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 782.707070] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 782.707468] ? mtree_range_walk+0x5c7/0x910 [ 782.707775] ? mas_walk+0x5c6/0x7c0 [ 782.708053] do_vmi_munmap+0x1e7/0x430 [ 782.708323] move_vma.constprop.0+0x88a/0x1ba0 [ 782.708646] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 782.708991] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 782.709392] ? selinux_mmap_addr+0x2d/0x110 [ 782.709685] ? security_mmap_addr+0x7d/0xa0 [ 782.710013] __do_sys_mremap+0x94e/0x1650 [ 782.710323] ? __pfx___do_sys_mremap+0x10/0x10 [ 782.710661] ? fput+0x2f/0x1a0 [ 782.710902] ? ksys_write+0x19e/0x250 [ 782.711171] ? __pfx_ksys_write+0x10/0x10 [ 782.711458] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 782.711828] do_syscall_64+0x3f/0x90 [ 782.712105] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 782.712477] RIP: 0033:0x7f8595db6b19 [ 782.712747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.713988] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 782.714520] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 782.715008] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 782.715508] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 782.716000] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 782.716495] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 782.717010] 01:59:51 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 34) 01:59:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:59:51 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 28) 01:59:51 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 17) 01:59:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:59:51 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 29) 01:59:51 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 31) 01:59:51 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, 0x0, 0x0) [ 793.886500] FAULT_INJECTION: forcing a failure. [ 793.886500] name failslab, interval 1, probability 0, space 0, times 0 [ 793.887305] CPU: 1 PID: 6026 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 793.887828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 793.888371] Call Trace: [ 793.888547] [ 793.888705] dump_stack_lvl+0xc1/0xf0 [ 793.888981] should_fail_ex+0x4b4/0x5b0 [ 793.889264] ? vm_area_dup+0x52/0x160 [ 793.889534] should_failslab+0x9/0x20 [ 793.889792] kmem_cache_alloc+0x61/0x390 [ 793.890072] vm_area_dup+0x52/0x160 [ 793.890329] __split_vma+0x173/0x770 [ 793.890589] ? lock_release+0x1e3/0x680 [ 793.890866] ? __pfx___split_vma+0x10/0x10 [ 793.891142] ? __pfx_lock_release+0x10/0x10 [ 793.891452] ? move_page_tables.part.0+0x98f/0x1f10 [ 793.891821] ? __pfx_lock_release+0x10/0x10 [ 793.892138] ? pte_offset_map_nolock+0x129/0x1e0 [ 793.892489] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 793.892883] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 793.893294] ? mtree_range_walk+0x5c7/0x910 [ 793.893614] ? mas_walk+0x5c6/0x7c0 [ 793.893893] do_vmi_munmap+0x1e7/0x430 [ 793.894179] move_vma.constprop.0+0x88a/0x1ba0 [ 793.894516] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 793.894841] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 793.895261] ? selinux_mmap_addr+0x2d/0x110 [ 793.895569] ? security_mmap_addr+0x7d/0xa0 [ 793.895883] __do_sys_mremap+0x94e/0x1650 [ 793.896202] ? __pfx___do_sys_mremap+0x10/0x10 [ 793.896546] ? fput+0x2f/0x1a0 [ 793.896792] ? ksys_write+0x19e/0x250 [ 793.897068] ? __pfx_ksys_write+0x10/0x10 [ 793.897361] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 793.897742] do_syscall_64+0x3f/0x90 [ 793.898012] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 793.898346] RIP: 0033:0x7f073098bb19 [ 793.898611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.899839] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 793.900375] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 793.900863] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 793.901350] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 793.901844] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 793.902327] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 793.902829] [ 793.918250] loop6: detected capacity change from 0 to 40 [ 793.926767] FAULT_INJECTION: forcing a failure. [ 793.926767] name failslab, interval 1, probability 0, space 0, times 0 [ 793.928283] CPU: 0 PID: 6028 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 793.929271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 793.930267] Call Trace: [ 793.930604] [ 793.930905] dump_stack_lvl+0xc1/0xf0 [ 793.931401] should_fail_ex+0x4b4/0x5b0 [ 793.931924] ? mas_alloc_nodes+0x4e7/0x890 [ 793.932493] should_failslab+0x9/0x20 [ 793.932984] kmem_cache_alloc+0x61/0x390 [ 793.933521] mas_alloc_nodes+0x4e7/0x890 [ 793.934050] mas_preallocate+0x1bf/0x370 [ 793.934573] __split_vma+0x191/0x770 [ 793.935054] ? lock_release+0x1e3/0x680 [ 793.935601] ? __pfx___split_vma+0x10/0x10 [ 793.936173] ? __pfx_lock_release+0x10/0x10 [ 793.936749] ? move_page_tables.part.0+0x98f/0x1f10 [ 793.937428] ? __pfx_lock_release+0x10/0x10 [ 793.938014] ? pte_offset_map_nolock+0x129/0x1e0 [ 793.938672] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 793.939443] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 793.940244] ? mtree_range_walk+0x5c7/0x910 [ 793.940870] ? mas_walk+0x5c6/0x7c0 [ 793.941384] do_vmi_munmap+0x1e7/0x430 [ 793.941930] move_vma.constprop.0+0x88a/0x1ba0 [ 793.942573] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 793.943259] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 793.944051] ? selinux_mmap_addr+0x2d/0x110 [ 793.944636] ? security_mmap_addr+0x7d/0xa0 [ 793.945241] __do_sys_mremap+0x94e/0x1650 [ 793.945836] ? __pfx___do_sys_mremap+0x10/0x10 [ 793.946459] ? perf_trace_preemptirq_template+0x252/0x420 [ 793.947207] ? fput+0x2f/0x1a0 [ 793.947668] ? __pfx_ksys_write+0x10/0x10 [ 793.948244] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 793.948941] do_syscall_64+0x3f/0x90 [ 793.949459] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 793.950157] RIP: 0033:0x7f68713cdb19 [ 793.950654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.952976] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 793.953963] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 793.954873] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 793.955782] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 793.956687] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 793.957621] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 793.958591] 01:59:51 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 29) [ 793.965724] loop4: detected capacity change from 0 to 39 01:59:51 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 18) 01:59:51 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 35) 01:59:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x30000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 794.064369] FAULT_INJECTION: forcing a failure. [ 794.064369] name failslab, interval 1, probability 0, space 0, times 0 [ 794.065160] CPU: 1 PID: 6042 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 794.065679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.066210] Call Trace: [ 794.066388] [ 794.066544] dump_stack_lvl+0xc1/0xf0 [ 794.066818] should_fail_ex+0x4b4/0x5b0 [ 794.067092] ? vm_area_dup+0x52/0x160 [ 794.067369] should_failslab+0x9/0x20 [ 794.067632] kmem_cache_alloc+0x61/0x390 [ 794.067926] vm_area_dup+0x52/0x160 [ 794.068192] __split_vma+0x173/0x770 [ 794.068450] ? lock_release+0x1e3/0x680 [ 794.068725] ? __pfx___split_vma+0x10/0x10 [ 794.069010] ? __pfx_lock_release+0x10/0x10 [ 794.069302] ? move_page_tables.part.0+0x98f/0x1f10 [ 794.069643] ? __pfx_lock_release+0x10/0x10 [ 794.069941] ? pte_offset_map_nolock+0x129/0x1e0 [ 794.070272] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 794.070651] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 794.071038] ? mtree_range_walk+0x5c7/0x910 [ 794.071107] FAULT_INJECTION: forcing a failure. [ 794.071107] name failslab, interval 1, probability 0, space 0, times 0 [ 794.071325] ? mas_walk+0x5c6/0x7c0 [ 794.071355] do_vmi_munmap+0x1e7/0x430 [ 794.073190] move_vma.constprop.0+0x88a/0x1ba0 [ 794.073517] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 794.073867] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 794.074292] ? selinux_mmap_addr+0x2d/0x110 [ 794.074603] ? security_mmap_addr+0x7d/0xa0 [ 794.074920] __do_sys_mremap+0x94e/0x1650 [ 794.075234] ? __pfx___do_sys_mremap+0x10/0x10 [ 794.075571] ? fput+0x2f/0x1a0 [ 794.075815] ? ksys_write+0x19e/0x250 [ 794.076072] ? __pfx_ksys_write+0x10/0x10 [ 794.076388] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 794.076763] do_syscall_64+0x3f/0x90 [ 794.077035] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 794.077400] RIP: 0033:0x7f5b71e1fb19 [ 794.077663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.078882] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 794.079405] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 794.079898] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 794.080394] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 794.080885] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 794.081384] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 794.081883] [ 794.082051] CPU: 0 PID: 6043 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 794.083145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.084209] Call Trace: [ 794.084566] [ 794.084875] dump_stack_lvl+0xc1/0xf0 [ 794.085418] should_fail_ex+0x4b4/0x5b0 [ 794.085964] ? mas_alloc_nodes+0x4e7/0x890 [ 794.086528] should_failslab+0x9/0x20 [ 794.087049] kmem_cache_alloc+0x61/0x390 [ 794.087596] ? mas_prev_slot+0x393/0x11e0 [ 794.088175] mas_alloc_nodes+0x4e7/0x890 [ 794.088743] mas_preallocate+0x1bf/0x370 [ 794.089301] vma_merge+0x98e/0x1a60 [ 794.089815] ? __pfx_vma_merge+0x10/0x10 [ 794.090381] ? find_vma_prev+0xe8/0x160 [ 794.090916] ? __pfx_find_vma_prev+0x10/0x10 [ 794.091555] ? lock_release+0x1e3/0x680 [ 794.092116] copy_vma+0x25f/0xb50 [ 794.092653] ? __pfx_copy_vma+0x10/0x10 [ 794.093210] ? up_write+0x196/0x510 [ 794.093723] ? lock_is_held_type+0x9f/0x120 [ 794.094324] move_vma.constprop.0+0x5b4/0x1ba0 [ 794.094965] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 794.095642] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 794.096471] ? __pfx_do_munmap+0x10/0x10 [ 794.097013] ? may_expand_vm.part.0+0x1c5/0x340 [ 794.097629] ? cap_mmap_addr+0x54/0x310 [ 794.098180] ? selinux_mmap_addr+0x2d/0x110 [ 794.098777] ? security_mmap_addr+0x7d/0xa0 [ 794.099404] __do_sys_mremap+0x94e/0x1650 [ 794.099982] ? __pfx___do_sys_mremap+0x10/0x10 [ 794.100608] ? perf_trace_preemptirq_template+0x252/0x420 [ 794.101399] ? fput+0x2f/0x1a0 [ 794.101862] ? __pfx_ksys_write+0x10/0x10 [ 794.102422] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 794.103120] do_syscall_64+0x3f/0x90 [ 794.103629] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 794.104342] RIP: 0033:0x7f950ebfeb19 [ 794.104861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.107216] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 794.108158] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 794.109016] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 794.109866] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 794.110719] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 794.111584] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 794.112490] [ 794.120638] loop4: detected capacity change from 0 to 39 01:59:51 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 36) 01:59:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 01:59:51 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 32) 01:59:51 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 30) 01:59:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 794.203321] FAULT_INJECTION: forcing a failure. [ 794.203321] name failslab, interval 1, probability 0, space 0, times 0 [ 794.205133] CPU: 0 PID: 6051 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 794.206238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.207203] FAULT_INJECTION: forcing a failure. [ 794.207203] name failslab, interval 1, probability 0, space 0, times 0 [ 794.207331] Call Trace: [ 794.207342] [ 794.207353] dump_stack_lvl+0xc1/0xf0 [ 794.209281] should_fail_ex+0x4b4/0x5b0 [ 794.209858] ? mas_alloc_nodes+0x4e7/0x890 [ 794.210445] should_failslab+0x9/0x20 [ 794.210982] kmem_cache_alloc+0x61/0x390 [ 794.211564] mas_alloc_nodes+0x4e7/0x890 [ 794.212169] mas_preallocate+0x1bf/0x370 [ 794.212747] __split_vma+0x191/0x770 [ 794.213273] ? lock_release+0x1e3/0x680 [ 794.213834] ? __pfx___split_vma+0x10/0x10 [ 794.214422] ? __pfx_lock_release+0x10/0x10 [ 794.215019] ? move_page_tables.part.0+0x98f/0x1f10 [ 794.215696] ? __pfx_lock_release+0x10/0x10 [ 794.216306] ? pte_offset_map_nolock+0x129/0x1e0 [ 794.216987] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 794.217753] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 794.218566] ? mtree_range_walk+0x5c7/0x910 [ 794.219188] ? mas_walk+0x5c6/0x7c0 [ 794.219722] do_vmi_munmap+0x1e7/0x430 [ 794.220282] move_vma.constprop.0+0x88a/0x1ba0 [ 794.220946] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 794.221641] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 794.222462] ? selinux_mmap_addr+0x2d/0x110 [ 794.223063] ? security_mmap_addr+0x7d/0xa0 [ 794.223685] __do_sys_mremap+0x94e/0x1650 [ 794.224302] ? __pfx___do_sys_mremap+0x10/0x10 [ 794.224944] ? perf_trace_preemptirq_template+0x252/0x420 [ 794.225713] ? fput+0x2f/0x1a0 [ 794.226189] ? __pfx_ksys_write+0x10/0x10 [ 794.226767] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 794.227470] do_syscall_64+0x3f/0x90 [ 794.228008] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 794.228707] RIP: 0033:0x7f68713cdb19 [ 794.229222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.231587] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 794.232651] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 794.233602] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 794.234544] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 794.235493] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 794.236446] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 794.237417] [ 794.237749] CPU: 1 PID: 6053 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 794.238313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.238866] Call Trace: [ 794.239049] [ 794.239212] dump_stack_lvl+0xc1/0xf0 [ 794.239491] should_fail_ex+0x4b4/0x5b0 [ 794.239781] ? vm_area_dup+0x52/0x160 [ 794.240062] should_failslab+0x9/0x20 [ 794.240348] kmem_cache_alloc+0x61/0x390 [ 794.240648] vm_area_dup+0x52/0x160 [ 794.240919] __split_vma+0x173/0x770 [ 794.241186] ? lock_release+0x1e3/0x680 [ 794.241475] ? __pfx___split_vma+0x10/0x10 [ 794.241768] ? __pfx_lock_release+0x10/0x10 [ 794.242070] ? move_page_tables.part.0+0x98f/0x1f10 [ 794.242431] ? __pfx_lock_release+0x10/0x10 [ 794.242705] ? pte_offset_map_nolock+0x129/0x1e0 [ 794.243053] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 794.243438] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 794.243847] ? mtree_range_walk+0x5c7/0x910 [ 794.244171] ? mas_walk+0x5c6/0x7c0 [ 794.244447] do_vmi_munmap+0x1e7/0x430 [ 794.244733] move_vma.constprop.0+0x88a/0x1ba0 [ 794.245073] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 794.245427] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 794.245842] ? selinux_mmap_addr+0x2d/0x110 [ 794.246146] ? security_mmap_addr+0x7d/0xa0 [ 794.246465] __do_sys_mremap+0x94e/0x1650 [ 794.246768] ? __pfx___do_sys_mremap+0x10/0x10 [ 794.247110] ? fput+0x2f/0x1a0 [ 794.247357] ? ksys_write+0x19e/0x250 [ 794.247605] ? __pfx_ksys_write+0x10/0x10 [ 794.247903] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 794.248248] do_syscall_64+0x3f/0x90 [ 794.248520] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 794.248878] RIP: 0033:0x7f073098bb19 [ 794.249141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.250358] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 794.250873] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 794.251360] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 794.251844] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 794.252333] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 794.252817] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 794.253312] 02:00:05 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 30) 02:00:05 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) (fail_nth: 1) 02:00:05 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 19) 02:00:05 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 33) 02:00:05 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 37) 02:00:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:00:05 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 31) 02:00:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 808.029127] loop6: detected capacity change from 0 to 40 [ 808.041130] FAULT_INJECTION: forcing a failure. [ 808.041130] name failslab, interval 1, probability 0, space 0, times 0 [ 808.042921] CPU: 0 PID: 6062 Comm: syz-executor.6 Not tainted 6.5.0-rc2-next-20230721 #1 [ 808.043907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.044917] Call Trace: [ 808.045241] [ 808.045533] dump_stack_lvl+0xc1/0xf0 [ 808.046036] should_fail_ex+0x4b4/0x5b0 [ 808.046568] ? fat_parse_long.constprop.0+0x8e9/0xb50 [ 808.047224] should_failslab+0x9/0x20 [ 808.047714] kmem_cache_alloc+0x61/0x390 [ 808.048238] fat_parse_long.constprop.0+0x8e9/0xb50 [ 808.048899] ? filldir64+0x1cc/0x600 [ 808.049411] __fat_readdir+0x87d/0x14a0 [ 808.049958] ? __pfx___fat_readdir+0x10/0x10 [ 808.050536] ? lock_is_held_type+0x9f/0x120 [ 808.051102] ? down_read_killable+0x1d7/0x4e0 [ 808.051684] ? inode_security+0x105/0x140 [ 808.052228] ? __pfx_down_read_killable+0x10/0x10 [ 808.052835] ? fsnotify_perm.part.0+0x248/0x680 [ 808.053432] iterate_dir+0x5c0/0x760 [ 808.053924] __x64_sys_getdents64+0x13e/0x2d0 [ 808.054501] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 808.055137] ? fput+0x2f/0x1a0 [ 808.055569] ? __pfx_filldir64+0x10/0x10 [ 808.056100] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 808.056796] do_syscall_64+0x3f/0x90 [ 808.057287] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 808.057933] RIP: 0033:0x7f94ea657b19 [ 808.058407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.060553] RSP: 002b:00007f94e7bcd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 808.061472] RAX: ffffffffffffffda RBX: 00007f94ea76af60 RCX: 00007f94ea657b19 [ 808.062347] RDX: 00000000000000a2 RSI: 0000000020000340 RDI: 0000000000000005 [ 808.063206] RBP: 00007f94e7bcd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.064055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.064909] R13: 00007ffd04142a9f R14: 00007f94e7bcd300 R15: 0000000000022000 [ 808.065792] [ 808.092725] FAULT_INJECTION: forcing a failure. [ 808.092725] name failslab, interval 1, probability 0, space 0, times 0 [ 808.094197] CPU: 1 PID: 6072 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 808.095180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.096167] Call Trace: [ 808.096508] [ 808.096801] dump_stack_lvl+0xc1/0xf0 [ 808.097287] should_fail_ex+0x4b4/0x5b0 [ 808.097806] should_failslab+0x9/0x20 [ 808.098307] kmem_cache_alloc_bulk+0x6b/0x630 [ 808.098874] loop4: detected capacity change from 0 to 39 [ 808.098885] ? kmem_cache_alloc+0x328/0x390 [ 808.100081] mas_alloc_nodes+0x337/0x890 [ 808.100641] mas_preallocate+0x1bf/0x370 [ 808.101167] __split_vma+0x191/0x770 [ 808.101656] ? lock_release+0x1e3/0x680 [ 808.102171] ? __pfx___split_vma+0x10/0x10 [ 808.102724] ? __pfx_lock_release+0x10/0x10 [ 808.103279] ? move_page_tables.part.0+0x98f/0x1f10 [ 808.103942] ? __pfx_lock_release+0x10/0x10 [ 808.104497] ? pte_offset_map_nolock+0x129/0x1e0 [ 808.105139] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 808.105829] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 808.106605] ? mtree_range_walk+0x5c7/0x910 [ 808.107204] ? mas_walk+0x5c6/0x7c0 [ 808.107690] do_vmi_munmap+0x1e7/0x430 [ 808.108214] move_vma.constprop.0+0x88a/0x1ba0 [ 808.108816] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 808.109485] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 808.110224] ? selinux_mmap_addr+0x2d/0x110 [ 808.110787] ? security_mmap_addr+0x7d/0xa0 [ 808.111343] __do_sys_mremap+0x94e/0x1650 [ 808.111925] ? __pfx___do_sys_mremap+0x10/0x10 [ 808.112545] ? fput+0x2f/0x1a0 [ 808.112994] ? ksys_write+0x19e/0x250 [ 808.113481] ? __pfx_ksys_write+0x10/0x10 [ 808.114035] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 808.114684] do_syscall_64+0x3f/0x90 [ 808.115189] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 808.115826] RIP: 0033:0x7f68713cdb19 [ 808.116330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.118460] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 808.119430] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 808.120289] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 808.121214] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 808.122112] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 808.123000] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 808.123926] [ 808.134430] FAULT_INJECTION: forcing a failure. [ 808.134430] name failslab, interval 1, probability 0, space 0, times 0 [ 808.136451] CPU: 1 PID: 6073 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 808.137666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.138891] Call Trace: [ 808.139304] [ 808.139669] dump_stack_lvl+0xc1/0xf0 [ 808.140274] should_fail_ex+0x4b4/0x5b0 [ 808.141039] ? mas_alloc_nodes+0x4e7/0x890 [ 808.141689] should_failslab+0x9/0x20 [ 808.142276] kmem_cache_alloc+0x61/0x390 [ 808.142920] mas_alloc_nodes+0x4e7/0x890 [ 808.143553] mas_preallocate+0x1bf/0x370 [ 808.144180] __split_vma+0x191/0x770 [ 808.144766] ? lock_release+0x1e3/0x680 [ 808.145281] ? __pfx___split_vma+0x10/0x10 [ 808.145818] ? __pfx_lock_release+0x10/0x10 [ 808.146365] ? move_page_tables.part.0+0x98f/0x1f10 [ 808.147004] ? __pfx_lock_release+0x10/0x10 [ 808.147545] ? pte_offset_map_nolock+0x129/0x1e0 [ 808.148185] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 808.148911] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 808.149642] ? mtree_range_walk+0x5c7/0x910 [ 808.150215] ? mas_walk+0x5c6/0x7c0 [ 808.150721] do_vmi_munmap+0x1e7/0x430 [ 808.151228] move_vma.constprop.0+0x88a/0x1ba0 [ 808.151851] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 808.152501] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 808.153248] ? selinux_mmap_addr+0x2d/0x110 [ 808.153798] ? security_mmap_addr+0x7d/0xa0 [ 808.154373] __do_sys_mremap+0x94e/0x1650 [ 808.154926] ? __pfx___do_sys_mremap+0x10/0x10 [ 808.155524] ? fput+0x2f/0x1a0 [ 808.155969] ? ksys_write+0x19e/0x250 [ 808.156485] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 808.157151] do_syscall_64+0x3f/0x90 [ 808.157636] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 808.158284] RIP: 0033:0x7f073098bb19 [ 808.158750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.160916] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 808.161831] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 808.162681] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 808.163538] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 808.164411] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 808.165273] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 808.166170] 02:00:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x80000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:00:05 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 20) 02:00:05 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 38) 02:00:05 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) (fail_nth: 2) 02:00:05 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 31) [ 808.321854] FAULT_INJECTION: forcing a failure. [ 808.321854] name failslab, interval 1, probability 0, space 0, times 0 [ 808.323413] CPU: 0 PID: 6081 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 808.324422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.325410] Call Trace: [ 808.325732] [ 808.326028] dump_stack_lvl+0xc1/0xf0 [ 808.326531] should_fail_ex+0x4b4/0x5b0 [ 808.327045] should_failslab+0x9/0x20 [ 808.327532] kmem_cache_alloc_bulk+0x6b/0x630 [ 808.328112] ? kmem_cache_alloc+0x328/0x390 [ 808.328679] ? mas_prev_slot+0x393/0x11e0 [ 808.329213] mas_alloc_nodes+0x337/0x890 [ 808.329737] mas_preallocate+0x1bf/0x370 [ 808.330262] vma_merge+0x98e/0x1a60 [ 808.330742] ? __pfx_vma_merge+0x10/0x10 [ 808.331255] ? find_vma_prev+0xe8/0x160 [ 808.331755] ? __pfx_find_vma_prev+0x10/0x10 [ 808.332303] ? lock_release+0x1e3/0x680 [ 808.332839] copy_vma+0x25f/0xb50 [ 808.333307] ? __pfx_copy_vma+0x10/0x10 [ 808.333829] ? up_write+0x196/0x510 [ 808.334323] ? lock_is_held_type+0x9f/0x120 [ 808.334875] move_vma.constprop.0+0x5b4/0x1ba0 [ 808.335476] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 808.336107] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 808.336844] ? __pfx_do_munmap+0x10/0x10 [ 808.337351] ? may_expand_vm.part.0+0x1c5/0x340 [ 808.337931] ? cap_mmap_addr+0x54/0x310 [ 808.338447] ? selinux_mmap_addr+0x2d/0x110 [ 808.338987] ? security_mmap_addr+0x7d/0xa0 [ 808.339548] __do_sys_mremap+0x94e/0x1650 [ 808.340087] ? __pfx___do_sys_mremap+0x10/0x10 [ 808.340686] ? perf_trace_preemptirq_template+0x252/0x420 [ 808.341388] ? fput+0x2f/0x1a0 [ 808.341824] ? __pfx_ksys_write+0x10/0x10 [ 808.342349] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 808.343010] do_syscall_64+0x3f/0x90 [ 808.343493] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 808.344184] RIP: 0033:0x7f950ebfeb19 [ 808.344667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.346852] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 808.347786] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 808.348699] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 808.349600] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 808.350516] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 808.351414] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 808.352351] [ 808.381605] loop6: detected capacity change from 0 to 40 [ 808.388515] FAULT_INJECTION: forcing a failure. [ 808.388515] name failslab, interval 1, probability 0, space 0, times 0 [ 808.389925] CPU: 0 PID: 6088 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 808.390952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.391981] Call Trace: [ 808.392333] [ 808.392635] dump_stack_lvl+0xc1/0xf0 [ 808.393139] should_fail_ex+0x4b4/0x5b0 [ 808.393666] ? mas_alloc_nodes+0x4e7/0x890 [ 808.394198] should_failslab+0x9/0x20 [ 808.394706] kmem_cache_alloc+0x61/0x390 [ 808.395245] mas_alloc_nodes+0x4e7/0x890 [ 808.395770] mas_preallocate+0x1bf/0x370 [ 808.396289] __split_vma+0x191/0x770 [ 808.396787] ? lock_release+0x1e3/0x680 [ 808.397295] ? __pfx___split_vma+0x10/0x10 [ 808.397830] ? __pfx_lock_release+0x10/0x10 [ 808.398382] ? move_page_tables.part.0+0x98f/0x1f10 [ 808.399036] ? __pfx_lock_release+0x10/0x10 [ 808.399610] ? pte_offset_map_nolock+0x129/0x1e0 [ 808.400254] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 808.400986] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 808.401746] ? mtree_range_walk+0x5c7/0x910 [ 808.402340] ? mas_walk+0x5c6/0x7c0 [ 808.402845] do_vmi_munmap+0x1e7/0x430 [ 808.403365] move_vma.constprop.0+0x88a/0x1ba0 [ 808.403988] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 808.404663] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 808.405437] ? selinux_mmap_addr+0x2d/0x110 [ 808.406008] ? security_mmap_addr+0x7d/0xa0 [ 808.406598] __do_sys_mremap+0x94e/0x1650 [ 808.407170] ? __pfx___do_sys_mremap+0x10/0x10 [ 808.407786] ? perf_trace_preemptirq_template+0x252/0x420 [ 808.408523] ? fput+0x2f/0x1a0 [ 808.408976] ? __pfx_ksys_write+0x10/0x10 [ 808.409519] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 808.410211] do_syscall_64+0x3f/0x90 [ 808.410709] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 808.411397] RIP: 0033:0x7f5b71e1fb19 [ 808.411874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.414115] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 808.415097] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 808.416002] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 808.416902] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 808.417791] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 808.418680] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 808.419594] 02:00:19 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 32) 02:00:19 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) (fail_nth: 3) 02:00:19 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 39) 02:00:19 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 34) 02:00:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:00:19 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 32) 02:00:19 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 21) 02:00:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 821.576835] loop6: detected capacity change from 0 to 40 [ 821.591579] loop4: detected capacity change from 0 to 39 [ 821.608108] FAULT_INJECTION: forcing a failure. [ 821.608108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.609660] CPU: 1 PID: 6104 Comm: syz-executor.6 Not tainted 6.5.0-rc2-next-20230721 #1 [ 821.610672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 821.611672] Call Trace: [ 821.612005] [ 821.612300] dump_stack_lvl+0xc1/0xf0 [ 821.612813] should_fail_ex+0x4b4/0x5b0 [ 821.613332] _copy_to_user+0x30/0xc0 [ 821.613832] simple_read_from_buffer+0xd0/0x170 [ 821.614425] proc_fail_nth_read+0x1a6/0x290 [ 821.614984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 821.615596] ? security_file_permission+0xb5/0xe0 [ 821.616233] vfs_read+0x1de/0x8f0 [ 821.616700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 821.617322] ? __pfx_vfs_read+0x10/0x10 [ 821.617841] ? __fget_files+0x267/0x480 [ 821.618399] ksys_read+0x122/0x250 [ 821.618872] ? __pfx_ksys_read+0x10/0x10 [ 821.619408] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 821.620095] do_syscall_64+0x3f/0x90 [ 821.620619] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 821.621293] RIP: 0033:0x7f94ea60a69c [ 821.621778] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 821.624020] RSP: 002b:00007f94e7bcd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 821.624978] RAX: ffffffffffffffda RBX: 0000000000000050 RCX: 00007f94ea60a69c [ 821.625879] RDX: 000000000000000f RSI: 00007f94e7bcd1e0 RDI: 0000000000000004 [ 821.626777] RBP: 00007f94e7bcd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 821.627676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.628582] R13: 00007ffd04142a9f R14: 00007f94e7bcd300 R15: 0000000000022000 02:00:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 821.629499] 02:00:19 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 33) 02:00:19 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 33) 02:00:19 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 40) 02:00:19 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 22) 02:00:19 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:00:19 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 35) [ 821.775838] FAULT_INJECTION: forcing a failure. [ 821.775838] name failslab, interval 1, probability 0, space 0, times 0 [ 821.777407] CPU: 0 PID: 6114 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 821.778396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 821.779380] Call Trace: [ 821.779705] [ 821.779997] dump_stack_lvl+0xc1/0xf0 [ 821.780511] should_fail_ex+0x4b4/0x5b0 [ 821.781027] should_failslab+0x9/0x20 [ 821.781521] kmem_cache_alloc_bulk+0x6b/0x630 [ 821.782093] ? kmem_cache_alloc+0x328/0x390 [ 821.782648] mas_alloc_nodes+0x337/0x890 [ 821.783175] mas_preallocate+0x1bf/0x370 [ 821.783706] __split_vma+0x191/0x770 [ 821.784186] ? lock_release+0x1e3/0x680 [ 821.784722] ? __pfx___split_vma+0x10/0x10 [ 821.785252] ? __pfx_lock_release+0x10/0x10 [ 821.785794] ? move_page_tables.part.0+0x98f/0x1f10 [ 821.786433] ? __pfx_lock_release+0x10/0x10 [ 821.786966] ? pte_offset_map_nolock+0x129/0x1e0 [ 821.787585] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 821.788282] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 821.789031] ? mtree_range_walk+0x5c7/0x910 [ 821.789599] ? mas_walk+0x5c6/0x7c0 [ 821.790094] do_vmi_munmap+0x1e7/0x430 [ 821.790595] move_vma.constprop.0+0x88a/0x1ba0 [ 821.791193] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 821.791825] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 821.792586] ? selinux_mmap_addr+0x2d/0x110 [ 821.793133] ? security_mmap_addr+0x7d/0xa0 [ 821.793702] __do_sys_mremap+0x94e/0x1650 [ 821.794252] ? __pfx___do_sys_mremap+0x10/0x10 [ 821.794837] ? perf_trace_preemptirq_template+0x252/0x420 [ 821.795537] ? fput+0x2f/0x1a0 [ 821.795972] ? __pfx_ksys_write+0x10/0x10 [ 821.796504] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 821.797165] do_syscall_64+0x3f/0x90 [ 821.797647] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 821.798294] RIP: 0033:0x7f073098bb19 [ 821.798759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 821.800962] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 821.801888] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 821.802752] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 821.803618] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 821.804506] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 821.805382] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 821.806286] [ 821.831946] FAULT_INJECTION: forcing a failure. [ 821.831946] name failslab, interval 1, probability 0, space 0, times 0 [ 821.833360] CPU: 0 PID: 6118 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 821.834345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 821.835336] Call Trace: [ 821.835660] [ 821.835951] dump_stack_lvl+0xc1/0xf0 [ 821.836440] should_fail_ex+0x4b4/0x5b0 [ 821.836985] should_failslab+0x9/0x20 [ 821.837473] kmem_cache_alloc_bulk+0x6b/0x630 [ 821.838065] ? kmem_cache_alloc+0x328/0x390 [ 821.838629] mas_alloc_nodes+0x337/0x890 [ 821.839168] mas_preallocate+0x1bf/0x370 [ 821.839707] __split_vma+0x191/0x770 [ 821.840195] ? lock_release+0x1e3/0x680 [ 821.840730] ? __pfx___split_vma+0x10/0x10 [ 821.841274] ? __pfx_lock_release+0x10/0x10 [ 821.841824] ? move_page_tables.part.0+0x98f/0x1f10 [ 821.842482] ? __pfx_lock_release+0x10/0x10 [ 821.843052] ? pte_offset_map_nolock+0x129/0x1e0 [ 821.843698] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 821.844416] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 821.845190] ? mtree_range_walk+0x5c7/0x910 [ 821.845778] ? mas_walk+0x5c6/0x7c0 [ 821.846276] do_vmi_munmap+0x1e7/0x430 [ 821.846801] move_vma.constprop.0+0x88a/0x1ba0 [ 821.847424] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 821.848083] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 821.848874] ? selinux_mmap_addr+0x2d/0x110 [ 821.849437] ? security_mmap_addr+0x7d/0xa0 [ 821.850022] __do_sys_mremap+0x94e/0x1650 [ 821.850590] ? __pfx___do_sys_mremap+0x10/0x10 [ 821.851203] ? perf_trace_preemptirq_template+0x252/0x420 [ 821.851932] ? fput+0x2f/0x1a0 [ 821.852383] ? __pfx_ksys_write+0x10/0x10 [ 821.852943] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 821.853633] do_syscall_64+0x3f/0x90 [ 821.854128] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 821.854799] RIP: 0033:0x7f5b71e1fb19 [ 821.855283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 821.857521] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 821.858473] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 821.859365] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 821.860268] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 821.861174] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 821.862072] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 821.862990] [ 821.868106] loop6: detected capacity change from 0 to 40 02:00:19 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 23) 02:00:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:00:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:00:19 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 41) 02:00:19 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 34) [ 821.985996] loop4: detected capacity change from 0 to 39 02:00:19 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 36) [ 822.092071] FAULT_INJECTION: forcing a failure. [ 822.092071] name failslab, interval 1, probability 0, space 0, times 0 [ 822.093619] CPU: 1 PID: 6135 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 822.094573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 822.095542] Call Trace: [ 822.095873] [ 822.096162] dump_stack_lvl+0xc1/0xf0 [ 822.096666] should_fail_ex+0x4b4/0x5b0 [ 822.097174] should_failslab+0x9/0x20 [ 822.097656] kmem_cache_alloc_bulk+0x6b/0x630 [ 822.098223] ? kmem_cache_alloc+0x328/0x390 [ 822.098773] mas_alloc_nodes+0x337/0x890 [ 822.099291] mas_preallocate+0x1bf/0x370 [ 822.099806] __split_vma+0x191/0x770 [ 822.100282] ? lock_release+0x1e3/0x680 [ 822.100806] ? __pfx___split_vma+0x10/0x10 [ 822.101332] ? __pfx_lock_release+0x10/0x10 [ 822.101863] ? move_page_tables.part.0+0x98f/0x1f10 [ 822.102557] ? __pfx_lock_release+0x10/0x10 [ 822.103145] ? pte_offset_map_nolock+0x129/0x1e0 [ 822.103822] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 822.104595] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 822.105392] ? mtree_range_walk+0x5c7/0x910 [ 822.105995] ? mas_walk+0x5c6/0x7c0 [ 822.106531] do_vmi_munmap+0x1e7/0x430 [ 822.107031] move_vma.constprop.0+0x88a/0x1ba0 [ 822.107686] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 822.108367] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 822.109198] ? selinux_mmap_addr+0x2d/0x110 [ 822.109789] ? security_mmap_addr+0x7d/0xa0 [ 822.110409] __do_sys_mremap+0x94e/0x1650 [ 822.111006] ? __pfx___do_sys_mremap+0x10/0x10 [ 822.111658] ? fput+0x2f/0x1a0 [ 822.112126] ? ksys_write+0x19e/0x250 [ 822.112669] ? __pfx_ksys_write+0x10/0x10 [ 822.113241] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 822.113965] do_syscall_64+0x3f/0x90 [ 822.114485] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 822.115190] RIP: 0033:0x7f073098bb19 [ 822.115694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.118055] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 822.119047] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 822.119934] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 822.120790] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 822.121630] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 822.122501] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 822.123445] 02:00:31 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 34) [ 833.805154] loop6: detected capacity change from 0 to 40 02:00:31 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 35) 02:00:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:00:31 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 42) 02:00:31 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0x18) 02:00:31 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 24) 02:00:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:00:31 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 37) 02:00:31 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 35) [ 833.885221] loop4: detected capacity change from 0 to 39 [ 833.899241] FAULT_INJECTION: forcing a failure. [ 833.899241] name failslab, interval 1, probability 0, space 0, times 0 [ 833.901057] CPU: 0 PID: 6151 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 833.901988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 833.903220] Call Trace: [ 833.903536] [ 833.903903] dump_stack_lvl+0xc1/0xf0 [ 833.904382] should_fail_ex+0x4b4/0x5b0 [ 833.905039] ? vm_area_dup+0x20/0x160 [ 833.905520] should_failslab+0x9/0x20 [ 833.906124] kmem_cache_alloc+0x61/0x390 [ 833.906638] vm_area_dup+0x20/0x160 [ 833.907228] __split_vma+0x173/0x770 [ 833.907692] ? __pfx___split_vma+0x10/0x10 [ 833.908384] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 833.909055] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 833.909983] ? mtree_range_walk+0x5c7/0x910 [ 833.910534] ? mas_walk+0x5c6/0x7c0 [ 833.911140] do_vmi_munmap+0x1e7/0x430 [ 833.911626] move_vma.constprop.0+0x88a/0x1ba0 [ 833.912390] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 833.913012] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 833.914039] ? selinux_mmap_addr+0x2d/0x110 [ 833.914684] ? security_mmap_addr+0x7d/0xa0 [ 833.915485] __do_sys_mremap+0x94e/0x1650 [ 833.916134] ? __pfx___do_sys_mremap+0x10/0x10 [ 833.916841] ? perf_trace_preemptirq_template+0x252/0x420 [ 833.917668] ? fput+0x2f/0x1a0 [ 833.918177] ? __pfx_ksys_write+0x10/0x10 [ 833.918797] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 833.919577] do_syscall_64+0x3f/0x90 [ 833.920145] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 833.920924] RIP: 0033:0x7f8595db6b19 [ 833.921442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 833.924176] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 833.925083] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 833.926285] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 833.927306] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 833.928322] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 833.929343] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 833.930381] 02:00:43 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 25) 02:00:43 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 36) 02:00:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:00:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x3000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:00:43 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 36) 02:00:43 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 43) 02:00:43 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 38) 02:00:43 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000180)={0x103, 0x29, 0x2, {0x8001, [{{0x4, 0x4, 0x3}, 0x9, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x1}, 0xffffffffffffffb0, 0x9, 0x7, './file0'}, {{0x1, 0x3, 0x3}, 0x3, 0x1f, 0x7, './file0'}, {{0x2, 0x3, 0x4}, 0x2, 0x80, 0x7, './file0'}, {{0x40, 0x2, 0x8}, 0x524937d2, 0x4, 0x7, './file0'}, {{0x4, 0x4, 0x6}, 0xeed, 0x1f, 0x7, './file0'}, {{0x8, 0x2}, 0x5, 0xff, 0x7, './file0'}, {{0x2, 0x1, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x103) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002d40)={'batadv0\x00', 0x0}) [ 845.802590] loop6: detected capacity change from 0 to 40 sendmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{&(0x7f00000002c0)=@isdn={0x22, 0x5, 0xcf, 0x81, 0x7}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)="9ee649e5482852bc37617ce05b43a92412e8e597fc5c85a1176135feae0cc18326dc2457a263530768a12bd6bd57c2b9dca535dd1ac917dc3165209cd7e93136b051c88ca046583e43ce6d83b6c4b2238aab29bdd7f74eb01919d6ff729c43af860d4eb6aad4951ccfb05d812894ccdfbe7fc1754f45d8aec611745b9afe27b7d0978d4dbb5d637a821d5abf1f0cc15f40e3148a6506c97a92baf75af4f1c3b4118a5f794c19589ff03d9316eb0ac453f1daa99f4a28cee85f642f0678dbf2e43d342bba682c4647ba073a5406a4aa7966ab72bf56167354aae809e6a7", 0xdd}, {&(0x7f0000000500)="99b5c936041f01e54cf81c5bbf1c0e84fdde58a3d8b8b1220b940a0c6e4b88468b3e42ab6e96e30f50de4d16d9bcdf6bab109bd4e92b766fd8dcbe322c2c16827035a7b645ba1a0d0c20d5ca5fd79eda1b974054a85161c025e222553efbc914c1374004163e8e7b3fe163c625c72a4908a5c247de2281480e167e092b5a4241c4d1b8445be4", 0x86}], 0x2, &(0x7f00000005c0)=[{0x40, 0x6, 0x0, "2f2ea513589756595b15bf33d20e83e1a00e988eb607a3a2ebc938ae84335510cebd203e23c8078dbd"}, {0xa0, 0x29, 0xe5, "757eaafe07b82883d58da218c3ecc7cadabe9f128aecf924260101578abb0d3b79c877479efb7f6412fbf6ac7fdb1f316d370f917dd952c76391a4b3c0de2123c171bcfce5fa8b398b21f7ca23fde958424ef4f98226271d7ed3a1801c8f9360af5c5d3db20800f47231f83c70261f038edbbf9e6d445eae1fa7a64d4f18082dd1f67624752e4ae07423"}, {0x30, 0x115, 0x7, "ec421d73ecf92de2df04eb271d951e6da858494f796fa4c930518b0b7031"}, {0x68, 0x11, 0x7, "29aa68b5a0e186aa81d8cce26d6a32de36a39ccc9282ad7cf9c32c17b3d7780f774360fb692574c01c273f79d5fa6f5fd5fbe1b015165e81f2368a4481c9e388570b186f91d0e967a34b7d1c9b4a68af9024444dec"}, {0x88, 0x0, 0xcd31, "519c6369d34ced231246c6b250fca048b109e355a24fc8f62e9d3f3993ab781c09b98958b4ddb8ccb0eea8ae9dc3eb9b43e37b9dda95d564df04467a19f82772eba9eb78f2c5df63d619a5ec3d299eeb6168b76eda0ac82fc54317bdc55a9266fc63c36db315dbdc1e8ae7b4e4953d5a299f33e437b222"}, {0x98, 0x109, 0x9, "0b9d7cadb2f64e8cbe7540b82121af59bd00a46f4cf56f230b59db4fd9cb267437e6a1b79468bc23056256ef8ad060ae6fbbee92ca56a32cba0c454e7677f7441df343d35e1c196b137cec3a47b748773af7a1b3a280ed6440004477059843c0d3975f6d97703fb59ec30aa8590f50735424f08c35d8ac27cc54a4e7f4ba5373f300b1a1edd3"}], 0x298}}, {{&(0x7f0000000880)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000900)="d9ed4af44ae6a50c6e06d247071ea9dc850cee9bea1bee44119d430714cd3288b7d369162c832a66035f30ab45779934e8eeccfe6ba01bfa7efda6b726f1ba3d2701d19809ff381f4a6b3c88e9db11195aad9e96df2156fe4627da85e62f24d1d8c118152040068c077d27898b2685a71cb9d30fb1d2069d4e9c169efe2c090f340094be6ab2ea195d1f80dc03334a0c94dc676a08faf67f18758d3f1472ae0b8c32515042cb12b05093ad5b75f46eb82128fcf02aba2b23cae39fbf122f157b900665415fcb3e32de650c5965490cebcf67d4e4c974c990a3b4f2b24f09f78e498c8a1d193353c2c4f055dace71", 0xee}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="07fd355e7adb93573f6d6f079765ab9caabf696cd025c0466911d0eb56064d8c8ebae1712799660a719aa0900114857f936e0693c88c5cb92d58240285ac63e316d4489fa23f611ee0562269ba6e7d5ff54e1ffe7aa80f", 0x57}, {&(0x7f00000000c0)="ae59d06538eb4ee5a160b7b5b1af292a3d6ac02a60229f", 0x17}, {&(0x7f0000002a80)="a08f0d88fa9fd7a7bba875978a1799a526b8302ae63b29a03b1fe9050a7bc9027f3c232a414e8ecbcbbaf818a7627a4ad42f7b745e304c01e4cc26afbaed9ca0667915022aa610a9f0a9b667bd3acfa39c2ff3d70155f1afbdb2b03037dede8afc027031f52b7df734bfdefed9343841386306e32aa3b812f436d8da03778e16a319d2b511cf5fd1c4e0", 0x8a}], 0x6, &(0x7f0000002bc0)=[{0xe0, 0x102, 0x7, "a6be265612ee8cafc9414810191f0ce2082d190499c270ea8265df84096595cbe1f713a2b1c219606483fb4d1747b1258ff43cf0634bcfd934699c01981254418494ca8f957c335968bb5ff37cc2349d9087d2cf817fe86be10d8bd1f548bfa30954aa2b37f2193de30405024de5071fdea6358c53e8d83a12aa1aef60f2fa50bd9c8d53244e8bc1ef7a4e6b6c4dd48bcff4c32917ddc84bc2d4e01c2cb27abc1d761595dccef0f6e39667d5f867f25b0b941d18635f1c9bbe95cef1854611ca031180de795082d2f886"}, {0x20, 0x10d, 0x9, "f395dad7f10d1cd244d9"}, {0x80, 0x114, 0xba8, "2dd5ceccc7070d957374ba0bad0ec9b328a3bb8f778a504a22d412063cd05e3aa9e2d33e4ba841b5d2b2510d91c65816abddc183c68757c214f40c1d05a3f087a4261ff687577bc9301555666537dc6049b584527260e5b0d1d39daadc9d8e632b734c70d7219793b291d3444eb7"}], 0x180}}, {{&(0x7f0000002d80)=@xdp={0x2c, 0x2, r1, 0x14}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e00)="f22cb520c1ef6b029e06d41db817fcd669007169f9972b632fdc6c4bc2703d45", 0x20}, {&(0x7f0000002e40)="1e66fcc6c66ae3d76c4360d38d82af01e3c17051ae994716fe23a55d1b36f43fb85a", 0x22}, {&(0x7f0000002e80)="4ea257ec241eb886ac87176991e927f9b0b62e2aeafd49abc1edb069a2510c72d2fe02325baa9e1094c232ffb8fe15a0632721a67fba2fba9af277c2", 0x3c}, {&(0x7f0000002ec0)="db3420af396fc3d1946546df488b19c57042f9", 0x13}], 0x4, &(0x7f0000002f40)=[{0x90, 0x10d, 0xdc4, "c3bc8393a2118062c4608bfb552c7024e9ce943fb71a56ce625af25846b86e381a49abc01b7a6521d57f26f858c358f7aba3942dd13272c7ea1023437bd31c5568d63ecc3a694efacc31eb2a6bba1b8bd738cfd2faa20eb153f8d353380f61ca8256260d158c5de39000f09b23d49e9f9ee672fa9b90a0f995ee9c5200"}], 0x90}}, {{&(0x7f0000003000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003080)="f2a107d1ddd3523bd91f2be76a", 0xd}, {&(0x7f00000030c0)="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", 0x1000}, {&(0x7f00000040c0)="8577ccee1ee49d05d0ee171ddf672a3de0", 0x11}, {&(0x7f0000004100)="5eac6b77f4153def1acad97d3a6ff0cd36cac8669ddaa50721b2bd7e", 0x1c}, {&(0x7f0000004140)="0e94f3e5666dbf52991be853632d87758e31437c7076165f02062c12115ac17a37ed42b77b42cac9508de43ce8a565866097c3af41040bde61f9baa8a48051e0ab0426a683a7bf8ede2d904cf801db5d4e5f42cec6912efcf61e94ccd294b594506e6797729b13ab4d0f80cbd315e272", 0x70}, {&(0x7f00000041c0)="6c0bd28fbdf15145b9b16fc7db0ee2749c18c5895c6917b37ad437e3a2939bb97c7d479f372d38fd1cd98519148269639e28be53043b26b877", 0x39}], 0x6, &(0x7f0000004280)=[{0x60, 0x84, 0x4a, "022e7fa12b04dc4d95233bfaf63c3169028ed4a6cc22348dbf7a4141a87a7300c64e13bbe78cb92fc8c8792426705553c3591d8c602345b5fc690324b6b4324bd967e2599aef3f1a4d9b4d3f9482"}, {0xb0, 0x10c, 0x20, "d60acca47c2750c9613d1115d4bc5f6095123a102a6018897cd514d565592334fc016595bb90b2de18998bbb78f30b05778b64286fda99737206997c8d018f9920860a9a13487dd5ade98327f7d9b683345177739425c3d395ada160826f437721a3e191ac528b8f109e6e0e64ed3b2731ab1c0eb27a194fd81ff693752c1d700ef1086c426461e24cf1930627174ade649304d407f48a78e62cb2a9556a"}], 0x110}}, {{&(0x7f00000043c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0xff, 0x5, "0dce637ef996e6935b4fbc72318315935868e5fa9981f62b5254c7e585fb0b8d25eb1db725a840307bb4392ac023f7e3c8833faf8ddb02dba297d634d068b6", 0x2f}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004440)="0d0c5702616115be6145ee39d6", 0xd}, {&(0x7f0000004480)="30fa71c1304fac2f1978549df9064ff27281d0d1184a39f1805f950eec4d0866c1854159a8df1d9285db2c", 0x2b}, {&(0x7f00000044c0)="e3152e6f7268fc58721f258266acab5d2377b46a744a2d9a94537da0a6371d9410e58fa239eb8541ebf36e76e93b30f597ff05d2132f40330f0c15c95b1e9aa0b8cbfbb91bb0c52f9dd036fd8f5c63bea940f348f6dedc0c60892368d3c71e2e7a7d2010edddf2b4983268303596d87f7baa7df2b88681d3573c80d9302c8a6ef05be4074e5499972acd95ac10bacb3ef14f0eea0092dbf89f1332979ecfb16c694a4fe99a334b78f058dedd20a23283aba6ef3456084b8d0ab727dcde305b43c3da111dfeda3bbb83c8814bc1ddb1fddd7b429acbd144a2", 0xd8}], 0x3, &(0x7f0000004600)=[{0xd8, 0x118, 0x8, "3a3b54761d846d3badbb85667237277d3ad53d00ed24cb38fdf046e7f8a6dcd3dca6e873a0e42c4af2fb543a03c7df47113e0725169b4dd32f0de86e394b71cad4df3fd4a47edeb92fb3f3a9e54ae9c66ee787a780afff28c753c9805378f8dd18a6cb97387bf062ce91a03a3558fc49b5d04c3a37e37f7b640a4c41d037cdfe79122d84d41e492ba65cccd0db00905464ff959529dfbbbbc5a777ee8a0e6b2ddfb72cf066effaf37f05a96483d11025bf638aa09710fa0ef307bdd2f8772535def7"}, {0x30, 0x110, 0x6, "12a0b9403b2031d19fc3a1a0bdacceee63f26ae29ba397bc9f2ea3f78446"}], 0x108}}, {{&(0x7f0000004740)=@llc={0x1a, 0x8, 0x9, 0x1, 0x41, 0xb1}, 0x80, &(0x7f0000005b40)=[{&(0x7f00000047c0)="e726580c9bc5c59db662f4b027962f0b45bd14ec8dc926a6db95c67ab7615ddc94693238555f330aa103556247101fe2a97253c5875c8986a9703c139e33bd33fa248c6fee1cd37bb23603e51b671abadfb8217928e0440d15145c3042d9b95186f8c35e1c13a849b9a774b568a4cb64460e436c60ba492b26c12dc4f53bab182b14a7810175c581493b6cb15f7e397cd9a6ea89049fc8f6ecba3f77f35c229a6e12c738062f4a198d20be755f3dedc0ebef005ad6949f5671b1b0fdc6406d0311eb57f821dceded4044305b3f238d9732efb8633ad0f938783c28786c56aaf0636efbd33c785fcf82f3360529", 0xed}, {&(0x7f00000048c0)="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", 0x1000}, {&(0x7f00000058c0)="adbd19f1fee7771baa37c0658370b7a1309d79fd2c4b69b4", 0x18}, {&(0x7f0000005900)="66498c94a495e5ebce05bb0ca179bc3513e2b00f9bb1b34099a5ff4136a61e2e0eb3cec5be68f7aee4f63ca5b056c1abd3d51e95bb9423a0777a1d49d47ea046c9d22c89f57fb8c8b05fe7c2ea", 0x4d}, {&(0x7f0000005980)="62fe8f658dbb492a136c4c68dcb68f8082368318e03a559a36c57497ba117476e2dcf3810017baf9e9312374266ba3d252a851d48269b9e63cdedc8b7a5020d9435f987b4b96fe85f22d5bf6a94f90b4f39de0fd3cbd2b5097e5208360814caae96140fafa7c4c9d719321aaeac4e13a690b2484277ee2bef27c324fd7fbff936b60febecac8be88810d1a52f6c79861924edd931b2a1e2b0b3a3b000d97da53b30f2aacc94917cf5fdd9ed7ab4e4385086197c72aa4fc825ad1152e8fcdf8b7ed03fdac3c77c820c86351fbc45f462579caca1d332916de648eeba5ca886fee49d7fc053bec496a1065936ef0872e5ad2de9d0d", 0xf4}, {&(0x7f0000005a80)="b6be6efc5323b6c2aab013dc11981a62e204d03f6aa636ea13294e0351c2a4dc1db80c713edcdabe7d428fcc0fdb03e4549c2ff1d99e9c7b13dc3924c40317090541d27d26f3b9c96eb162bdaaf0327063e755a04210189fbfc82b7cbe2215edcccb2b3effec1fa6218c3f0519a05f07954918c4128599d35180420982e34e01ec4ed080411c2e", 0x87}], 0x6, &(0x7f0000005bc0)=[{0x50, 0x1f, 0x100, "75fda57432f96e1d13f5098dcce99c9fea42f5c7bcf8795cd09d5d6ee514ada360d427fadb5143cd1ace4f2b5a0ec2f2825fe227c4128a58dec962"}, {0x100, 0x10d, 0x3f, "55f1b45ee4f2cfa8e13d3f18cfd2c58312f872e30eebb89e2115b3f9053b69f7ddae19284793de43953f3edd8085e309d8b0a41e0428f43ca881a67e0631e8c0dde0e4626bfef5d95d9f0275e576c2b74da7e5fa09cd3111558a78d2b2c84ad8d5a1305f474fe9facee05826b7817f5f1b51a494ff9340deecb22aa9fb20c3ce178bfd6d0c02be579109796b3f003817941ab67b9f28581058e654f6f93d5abdb07e24fa10b52d73c4099a9d48ea1d7144a7adbf00a516401dab824cb121780b8aee9babcadbe64721860bfc2a665f5565c66285be8169ca99dca76e455fa119fdbd52e908574654a79edc21c46b"}, {0x48, 0x1, 0x3, "47190142a01a4044da2fdac8f6a2081b21171b78aff06925404bb84cbf7640ac3cfc675e43db0d01831f8f4d36c2fae34beb"}, {0x60, 0xff, 0x1ff, "f5760bbfe33a60db56f838677d9cd5f12cf1e8e4f96e9ece9439bca1402a88e5c8c0f791c818544905ae5c172f54e952a52d169177c23dc22edd47c6295eba1a2d87070fe7e0dc76ef7bb23f07663faf"}, {0x18, 0x114, 0x3, "38bd"}, {0x108, 0x103, 0x8001, "0da95670f575f8e2b8252034e9394a966d4b974e1aa00decef5237c721a4a28abd9a983860762eb208d3eb0dddf3b09877184e9a063b6a92076206439bf9c8f5929d5451e609a64ac16fe43a3cae038f78662c8256253b889a50d78beddd0e133cefb50ae6331e78de8e4bd9e4e6dbd018b4906420714fa54844901fbc8faaa95f863935544619a913e0977ef12f1a3c546ad2217dfe324a6f9e43201259a51aa8e6229ed729b8bb12e7f96ba20aff7365afd701cab445f2557944a30b67caaabce92b70ff241d588da9fd36a997eb1acc17a7cffb3e40a2f1c643ca8b7dfda6ba0b8c60ee70f2985dc3c645ed6765bf80c72c575d0b8f"}, {0x30, 0x1, 0xd188, "2ce5770fae60abc993cd4caf5b513b6bfe4229f30eaf98069b01946e42edc7ae"}, {0x38, 0x104, 0x9, "22e9d8ec3dcc5f0a6f90f48615b7d81473668ea34c08133e29ea986b80afdbf9010d26b80b"}, {0x38, 0x10b, 0x707, "e4507c67db69fc5e5a722935c82c85819662cae7d834b8fc3ace26950753dca3a32b10eb4d35ec69"}, {0x1010, 0x10d, 0x101, "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"}], 0x13c8}}, {{&(0x7f0000006fc0)=@pptp={0x18, 0x2, {0x1, @multicast1}}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000007040)="99f65bcfa89e568b669b0792985ee05e2b9916db789ac32f32ee4d849c8d676ac2d7cb5813bb4df8f0c81dda739ea6d608fde99a31d22f2c79f05cbfe25aab69fb78924fd3a88e54811fa701ee5fe9b8a2ac9c06dd5f01007cca1fa8ac34f45ad22e7cd1839324d71a1426acdadf5770b9bdf535c1073ce99ea5638f30aa0c68933632694dd2115a13fe31d24a25c499cfd68a168c3e944e929a2582f5404f9efc952176774d95a237fcd58ec577c076200ca148354f1bd38aefd597e59b645add93ed59a4ac701c1a761f8dd5be1dc36b1ac15ccbfbbbe02af9f924f0d5341a", 0xe0}, {&(0x7f0000007140)="f072ee4167b517b26688120aa8e41c01d9192db0fe3d6d64add3054f17ddc8ced8bd341bbab34af62f063ba81bf9fef038ee89cff9a46632cb24a43eb00a5a1320b3a2a2df8284476e3408cc87077e3d4be2fe5c33fd2f6b5390944733b4029e550b9df94da6e1569c2bd1b95ec40cdeb1bf5e3fd9ea9cb69b3e180a28eab90c2acd9dfb1adc984cccd51da889e9d2d939cedb5ac57a1f3046829e20132121d8236fa5bbda778e2e31f63bdd28d644b1e29d5234b84079ee9d74a4e257", 0xbd}, {&(0x7f0000007200)="37f6f90576f38e2994a361502840e1d002d52456ea71a2b6f96797d0b41bc4b036acfe46b31fcf771556b8141a4c89664aba8b6c095ff772696bb2b202ead65ffea8898529c9a0597986cf4c3eca5269db46c83ce30cfa3cb63021a22f8c8ccc07dc4e4aae28d47ee1c8000655ae2c19fa197676ed1c2be9bd9a91e7e9f7bb6f91332b534b", 0x85}], 0x3, &(0x7f0000007300)=[{0x20, 0x119, 0x5, "48cb2f01101243ff182128bc40"}], 0x20}}], 0x7, 0x20000851) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat(r0, &(0x7f0000007500)='./file1\x00', 0x10200, 0xd5) 02:00:43 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 44) 02:00:43 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 37) [ 845.869238] loop4: detected capacity change from 0 to 39 02:00:43 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x400002, 0x8) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r1, &(0x7f00000000c0)='net/mcfilter6\x00') getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 845.913027] syz-executor.4: attempt to access beyond end of device [ 845.913027] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 845.914821] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 845.915370] FAULT_INJECTION: forcing a failure. [ 845.915370] name failslab, interval 1, probability 0, space 0, times 0 [ 845.916592] CPU: 1 PID: 6182 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 845.917167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.917735] Call Trace: [ 845.917926] [ 845.918092] dump_stack_lvl+0xc1/0xf0 [ 845.918378] should_fail_ex+0x4b4/0x5b0 [ 845.918672] ? vm_area_dup+0x52/0x160 [ 845.918955] should_failslab+0x9/0x20 [ 845.919231] kmem_cache_alloc+0x61/0x390 [ 845.919530] vm_area_dup+0x52/0x160 [ 845.919797] __split_vma+0x173/0x770 [ 845.920068] ? __pfx___split_vma+0x10/0x10 [ 845.920385] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 845.920765] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 845.921192] ? mtree_range_walk+0x5c7/0x910 [ 845.921514] ? mas_walk+0x5c6/0x7c0 [ 845.921790] do_vmi_munmap+0x1e7/0x430 [ 845.922076] move_vma.constprop.0+0x88a/0x1ba0 [ 845.922413] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 845.922773] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 845.923198] ? selinux_mmap_addr+0x2d/0x110 [ 845.923504] ? security_mmap_addr+0x7d/0xa0 [ 845.923825] __do_sys_mremap+0x94e/0x1650 [ 845.924124] ? __pfx___do_sys_mremap+0x10/0x10 [ 845.924463] ? fput+0x2f/0x1a0 [ 845.924705] ? ksys_write+0x19e/0x250 [ 845.924991] ? __pfx_ksys_write+0x10/0x10 [ 845.925293] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 845.925667] do_syscall_64+0x3f/0x90 [ 845.925941] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 845.926307] RIP: 0033:0x7f8595db6b19 [ 845.926571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.927811] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 845.928306] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 845.928803] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 845.929296] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 845.929780] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 845.930267] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 845.930772] [ 845.933559] loop6: detected capacity change from 0 to 40 02:00:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x4000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:00:43 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 26) 02:00:43 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 37) 02:00:43 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 39) 02:00:43 executing program 6: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/162, 0xa2) r1 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x180) fcntl$dupfd(r1, 0x406, r0) chmod(&(0x7f00000000c0)='./file0\x00', 0x2) signalfd4(r1, &(0x7f0000000080)={[0x6]}, 0x8, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/85, 0x55) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 02:00:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:00:43 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 45) 02:00:43 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 38) 02:00:43 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 38) 02:00:43 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 46) 02:00:43 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000000)="d8dfd794f9e40a7cb139c42b6dab4ecf6a04000000646f7366d8a0bc7ced18000440", 0x22, 0x4}, {0x0, 0x0, 0x2800}, {&(0x7f0000000180)="b705deda9a9a3aed541c90d7396cf28c4e37fcc8e9b120c0f5b95aa2321df9bf67cf8a7a2a81a05dfa87b95096f7f4458e3a2bc0978ca4eab77b7f21b9c792aebef3606af05a2a49cb732f852f0b30aa2bf8105be489c61c3bb0f5e4b963d70c0ca96bf3955db13f", 0x68, 0x10002}], 0xa0000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) openat(r1, &(0x7f0000000300)='./file0\x00', 0x200800, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000600)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1, 0x96, 0x1, 0x6d, 0x0, 0x9f53, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x8000, 0x42a, 0x401, 0x6, 0xffffffffffff6a06, 0x100, 0x6, 0x0, 0x7477, 0x0, 0xa8a}, 0x0, 0x6, r3, 0x2) fallocate(r2, 0x0, 0x0, 0x87ffffc) r4 = open_tree(r2, &(0x7f0000000040)='./file1\x00', 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat(r4, &(0x7f0000000280)='./file1\x00', 0x24500, 0x20) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x50400, 0x0) 02:00:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x5000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 846.163971] loop4: detected capacity change from 0 to 39 [ 846.169810] loop6: detected capacity change from 0 to 256 [ 846.190733] loop6: detected capacity change from 0 to 256 [ 846.198735] syz-executor.4: attempt to access beyond end of device [ 846.198735] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 846.200206] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:00:55 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 27) 02:00:55 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 39) 02:00:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:00:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x6000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:00:55 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 47) 02:00:55 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 39) 02:00:55 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x101182, 0x0, 0x2}, 0x18) 02:00:55 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 40) [ 858.121558] FAULT_INJECTION: forcing a failure. [ 858.121558] name failslab, interval 1, probability 0, space 0, times 0 [ 858.122417] CPU: 0 PID: 6224 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 858.122987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.123563] Call Trace: [ 858.123746] [ 858.123913] dump_stack_lvl+0xc1/0xf0 [ 858.124208] should_fail_ex+0x4b4/0x5b0 [ 858.124494] ? vm_area_dup+0x20/0x160 [ 858.124777] should_failslab+0x9/0x20 [ 858.125066] kmem_cache_alloc+0x61/0x390 [ 858.125367] ? __pfx_lock_acquire+0x10/0x10 [ 858.125672] vm_area_dup+0x20/0x160 [ 858.125951] __split_vma+0x173/0x770 [ 858.126216] ? lock_release+0x1e3/0x680 [ 858.126507] ? __pfx___split_vma+0x10/0x10 [ 858.126801] ? __pfx_lock_release+0x10/0x10 [ 858.127109] ? move_page_tables.part.0+0x98f/0x1f10 [ 858.127464] ? __pfx_lock_release+0x10/0x10 [ 858.127773] ? pte_offset_map_nolock+0x129/0x1e0 [ 858.128112] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 858.128505] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 858.128898] ? mtree_range_walk+0x5c7/0x910 [ 858.129239] ? mas_walk+0x5c6/0x7c0 [ 858.129506] do_vmi_munmap+0x1e7/0x430 [ 858.129788] move_vma.constprop.0+0x88a/0x1ba0 [ 858.130140] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 858.130488] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 858.130912] ? selinux_mmap_addr+0x2d/0x110 [ 858.131229] ? security_mmap_addr+0x7d/0xa0 [ 858.131545] __do_sys_mremap+0x94e/0x1650 [ 858.131858] ? __pfx___do_sys_mremap+0x10/0x10 [ 858.132193] ? perf_trace_preemptirq_template+0x252/0x420 [ 858.132607] ? fput+0x2f/0x1a0 [ 858.132853] ? __pfx_ksys_write+0x10/0x10 [ 858.133163] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 858.133541] do_syscall_64+0x3f/0x90 [ 858.133822] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 858.134195] RIP: 0033:0x7f950ebfeb19 [ 858.134466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.135672] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 858.136210] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 858.136716] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 858.137230] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 858.137728] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 858.138225] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 858.138743] [ 858.148652] loop6: detected capacity change from 0 to 40 [ 858.156142] loop4: detected capacity change from 0 to 39 [ 858.214239] syz-executor.4: attempt to access beyond end of device [ 858.214239] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 858.216211] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:01:08 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 40) 02:01:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:01:08 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 41) 02:01:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x7000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:01:08 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 40) 02:01:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000031000000080001004900000008000300a705a83962f7b6042deb37ee9acfd5a54447358bf737def039e1aa5d4d9dcc052799ea8c257e3f4fb773d1b45517", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000"], 0x30}}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r4, &(0x7f0000000340)=""/162, 0xa2) 02:01:08 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 48) 02:01:08 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 28) [ 870.766815] FAULT_INJECTION: forcing a failure. [ 870.766815] name failslab, interval 1, probability 0, space 0, times 0 [ 870.767640] CPU: 1 PID: 6245 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 870.768163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 870.768693] Call Trace: [ 870.768868] [ 870.769023] dump_stack_lvl+0xc1/0xf0 [ 870.769305] should_fail_ex+0x4b4/0x5b0 [ 870.769582] should_failslab+0x9/0x20 [ 870.769844] kmem_cache_alloc_bulk+0x6b/0x630 [ 870.770152] ? kmem_cache_alloc+0x328/0x390 [ 870.770453] mas_alloc_nodes+0x337/0x890 [ 870.770740] mas_preallocate+0x1bf/0x370 [ 870.771020] __split_vma+0x191/0x770 [ 870.771279] ? __pfx___split_vma+0x10/0x10 [ 870.771580] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 870.771961] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 870.772351] ? mtree_range_walk+0x5c7/0x910 [ 870.772655] ? mas_walk+0x5c6/0x7c0 [ 870.772913] do_vmi_munmap+0x1e7/0x430 [ 870.773198] move_vma.constprop.0+0x88a/0x1ba0 [ 870.773521] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 870.773863] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 870.774258] ? selinux_mmap_addr+0x2d/0x110 [ 870.774551] ? security_mmap_addr+0x7d/0xa0 [ 870.774864] __do_sys_mremap+0x94e/0x1650 [ 870.775158] ? __pfx___do_sys_mremap+0x10/0x10 [ 870.775477] ? fput+0x2f/0x1a0 [ 870.775712] ? ksys_write+0x19e/0x250 [ 870.775971] ? __pfx_ksys_write+0x10/0x10 [ 870.776253] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 870.776625] do_syscall_64+0x3f/0x90 [ 870.776904] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 870.777268] RIP: 0033:0x7f8595db6b19 [ 870.777544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 870.778776] RSP: 002b:00007f859332c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 870.779271] RAX: ffffffffffffffda RBX: 00007f8595ec9f60 RCX: 00007f8595db6b19 [ 870.779743] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 870.780245] RBP: 00007f859332c1d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 870.780747] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 870.781272] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 870.781774] [ 870.795691] loop4: detected capacity change from 0 to 39 [ 870.802833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 870.813605] loop6: detected capacity change from 0 to 40 02:01:08 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 49) [ 870.834673] syz-executor.4: attempt to access beyond end of device [ 870.834673] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 870.835543] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 870.850147] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 02:01:08 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 42) 02:01:08 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 41) 02:01:08 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 41) 02:01:08 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 29) 02:01:08 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:01:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:01:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x9000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 870.964405] FAULT_INJECTION: forcing a failure. [ 870.964405] name failslab, interval 1, probability 0, space 0, times 0 [ 870.965172] CPU: 1 PID: 6266 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 870.965708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 870.966237] Call Trace: [ 870.966416] [ 870.966583] dump_stack_lvl+0xc1/0xf0 [ 870.966854] should_fail_ex+0x4b4/0x5b0 [ 870.967125] ? vm_area_dup+0x52/0x160 [ 870.967399] should_failslab+0x9/0x20 [ 870.967660] kmem_cache_alloc+0x61/0x390 [ 870.967944] vm_area_dup+0x52/0x160 [ 870.968201] __split_vma+0x173/0x770 [ 870.968460] ? lock_release+0x1e3/0x680 [ 870.968736] ? __pfx___split_vma+0x10/0x10 [ 870.969020] ? __pfx_lock_release+0x10/0x10 [ 870.969334] ? move_page_tables.part.0+0x98f/0x1f10 [ 870.969676] ? __pfx_lock_release+0x10/0x10 [ 870.969961] ? pte_offset_map_nolock+0x129/0x1e0 [ 870.970289] do_vmi_align_munmap.constprop.0+0x298/0x12a0 [ 870.970660] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 870.971050] ? mtree_range_walk+0x5c7/0x910 [ 870.971358] ? mas_walk+0x5c6/0x7c0 [ 870.971614] do_vmi_munmap+0x1e7/0x430 [ 870.971883] move_vma.constprop.0+0x88a/0x1ba0 [ 870.972205] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 870.972548] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 870.972956] ? selinux_mmap_addr+0x2d/0x110 [ 870.973254] ? security_mmap_addr+0x7d/0xa0 [ 870.973566] __do_sys_mremap+0x94e/0x1650 [ 870.973860] ? __pfx___do_sys_mremap+0x10/0x10 [ 870.974182] ? fput+0x2f/0x1a0 [ 870.974415] ? ksys_write+0x19e/0x250 [ 870.974672] ? __pfx_ksys_write+0x10/0x10 [ 870.974958] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 870.975312] do_syscall_64+0x3f/0x90 [ 870.975572] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 870.975941] RIP: 0033:0x7f950ebfeb19 [ 870.976193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 870.977442] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 870.977938] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 870.978427] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 870.978918] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 870.979417] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 870.979911] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 870.980421] [ 870.993952] loop6: detected capacity change from 0 to 40 [ 870.997771] FAULT_INJECTION: forcing a failure. [ 870.997771] name failslab, interval 1, probability 0, space 0, times 0 [ 870.999347] CPU: 0 PID: 6270 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 871.000401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 871.001443] Call Trace: [ 871.001785] [ 871.002091] dump_stack_lvl+0xc1/0xf0 02:01:08 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 50) [ 871.002622] should_fail_ex+0x4b4/0x5b0 [ 871.003279] ? vm_area_dup+0x20/0x160 [ 871.003822] should_failslab+0x9/0x20 [ 871.004353] kmem_cache_alloc+0x61/0x390 [ 871.004932] vm_area_dup+0x20/0x160 [ 871.005467] __split_vma+0x173/0x770 [ 871.005641] loop4: detected capacity change from 0 to 39 [ 871.005981] ? __pfx___split_vma+0x10/0x10 [ 871.006951] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 871.007711] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 871.008505] ? mtree_range_walk+0x5c7/0x910 [ 871.009127] ? mas_walk+0x5c6/0x7c0 [ 871.009662] do_vmi_munmap+0x1e7/0x430 [ 871.010206] move_vma.constprop.0+0x88a/0x1ba0 [ 871.010857] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 871.011546] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 871.012359] ? selinux_mmap_addr+0x2d/0x110 [ 871.012942] ? security_mmap_addr+0x7d/0xa0 [ 871.013574] __do_sys_mremap+0x94e/0x1650 [ 871.014167] ? __pfx___do_sys_mremap+0x10/0x10 [ 871.014810] ? perf_trace_preemptirq_template+0x252/0x420 [ 871.015573] ? fput+0x2f/0x1a0 [ 871.016043] ? __pfx_ksys_write+0x10/0x10 [ 871.016621] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 871.017353] do_syscall_64+0x3f/0x90 [ 871.017879] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 871.018614] RIP: 0033:0x7f68713cdb19 [ 871.019130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 871.021486] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 871.022484] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 871.023421] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 871.024349] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 871.025301] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 871.026230] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 871.027196] [ 871.067749] syz-executor.4: attempt to access beyond end of device [ 871.067749] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 871.068672] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:01:08 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 42) 02:01:08 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 51) 02:01:08 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 42) 02:01:08 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 30) 02:01:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 871.178798] FAULT_INJECTION: forcing a failure. [ 871.178798] name failslab, interval 1, probability 0, space 0, times 0 [ 871.180370] CPU: 0 PID: 6286 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 871.181438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 871.182479] Call Trace: [ 871.182837] [ 871.183148] dump_stack_lvl+0xc1/0xf0 [ 871.183675] should_fail_ex+0x4b4/0x5b0 [ 871.184218] ? vm_area_dup+0x20/0x160 [ 871.184751] should_failslab+0x9/0x20 [ 871.185291] kmem_cache_alloc+0x61/0x390 [ 871.185857] vm_area_dup+0x20/0x160 [ 871.186365] __split_vma+0x173/0x770 [ 871.186878] ? __pfx___split_vma+0x10/0x10 [ 871.187476] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 871.188214] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 871.189014] ? mtree_range_walk+0x5c7/0x910 [ 871.189633] ? mas_walk+0x5c6/0x7c0 [ 871.190158] do_vmi_munmap+0x1e7/0x430 [ 871.190694] move_vma.constprop.0+0x88a/0x1ba0 02:01:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 871.191353] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 871.192134] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 871.192941] ? selinux_mmap_addr+0x2d/0x110 [ 871.193552] ? security_mmap_addr+0x7d/0xa0 [ 871.194163] __do_sys_mremap+0x94e/0x1650 [ 871.194758] ? __pfx___do_sys_mremap+0x10/0x10 [ 871.195386] ? perf_trace_preemptirq_template+0x252/0x420 [ 871.196151] ? fput+0x2f/0x1a0 [ 871.196350] loop4: detected capacity change from 0 to 39 [ 871.196608] ? __pfx_ksys_write+0x10/0x10 [ 871.197556] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 871.198278] do_syscall_64+0x3f/0x90 [ 871.198814] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 871.199528] RIP: 0033:0x7f5b71e1fb19 [ 871.200030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 871.202389] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 871.203381] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 871.204311] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 871.205253] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 871.206168] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 871.207085] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 871.208020] 02:01:08 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 31) [ 871.219210] FAULT_INJECTION: forcing a failure. [ 871.219210] name failslab, interval 1, probability 0, space 0, times 0 [ 871.220869] CPU: 0 PID: 6288 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 871.221943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 871.222986] Call Trace: [ 871.223332] [ 871.223645] dump_stack_lvl+0xc1/0xf0 [ 871.224169] should_fail_ex+0x4b4/0x5b0 [ 871.224715] ? vm_area_dup+0x20/0x160 [ 871.225270] should_failslab+0x9/0x20 [ 871.225788] kmem_cache_alloc+0x61/0x390 [ 871.226353] vm_area_dup+0x20/0x160 [ 871.226859] __split_vma+0x173/0x770 [ 871.227375] ? __pfx___split_vma+0x10/0x10 [ 871.227965] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 871.228709] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 871.229505] ? mtree_range_walk+0x5c7/0x910 [ 871.230104] ? mas_walk+0x5c6/0x7c0 [ 871.230626] do_vmi_munmap+0x1e7/0x430 02:01:08 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 52) [ 871.231154] move_vma.constprop.0+0x88a/0x1ba0 [ 871.231878] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 871.232552] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 871.233372] ? selinux_mmap_addr+0x2d/0x110 [ 871.233945] ? security_mmap_addr+0x7d/0xa0 [ 871.234553] __do_sys_mremap+0x94e/0x1650 [ 871.235139] ? __pfx___do_sys_mremap+0x10/0x10 [ 871.235759] ? perf_trace_preemptirq_template+0x252/0x420 [ 871.236502] ? fput+0x2f/0x1a0 [ 871.236961] ? __pfx_ksys_write+0x10/0x10 [ 871.237525] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 871.238225] do_syscall_64+0x3f/0x90 [ 871.238736] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 871.239418] RIP: 0033:0x7f073098bb19 [ 871.239920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 871.242250] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 871.243258] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 871.244200] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 871.245146] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 871.246084] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 871.247020] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 871.247986] [ 871.338360] syz-executor.4: attempt to access beyond end of device [ 871.338360] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 871.339204] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:01:20 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 32) 02:01:20 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 43) 02:01:20 executing program 6: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x4, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file1\x00') chdir(&(0x7f0000000180)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x123442, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1) fallocate(r1, 0x0, 0x2, 0x87ffffc) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x200, 0x103) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) 02:01:20 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 43) 02:01:20 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 53) 02:01:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x20000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:01:20 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 43) 02:01:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 883.050933] loop6: detected capacity change from 0 to 40 02:01:20 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 44) 02:01:20 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 44) [ 883.069712] loop4: detected capacity change from 0 to 39 [ 883.104108] syz-executor.4: attempt to access beyond end of device [ 883.104108] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 883.105764] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:01:20 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 44) 02:01:20 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 33) [ 883.179783] kworker/u4:0: attempt to access beyond end of device [ 883.179783] loop6: rw=1, sector=124, nr_sectors = 4 limit=40 [ 883.181338] Buffer I/O error on dev loop6, logical block 31, lost async page write 02:01:33 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 54) 02:01:33 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 45) 02:01:33 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 45) 02:01:33 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 45) 02:01:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:01:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x6) getdents64(r1, &(0x7f0000000180)=""/79, 0x4f) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x3, 0x9, 0xff, 0x0, 0xe6dc, 0x20480, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc426, 0x1, @perf_config_ext={0x0, 0x10001}, 0x40046, 0x3, 0xe194, 0x2, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x10, r1, 0x1) 02:01:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:01:33 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 34) [ 895.641130] loop6: detected capacity change from 0 to 40 [ 895.645734] loop4: detected capacity change from 0 to 39 [ 895.665986] syz-executor.4: attempt to access beyond end of device [ 895.665986] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 895.666844] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:01:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1610c0, 0xe4) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:01:33 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 46) 02:01:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 895.771998] loop6: detected capacity change from 0 to 40 [ 895.785654] FAULT_INJECTION: forcing a failure. [ 895.785654] name failslab, interval 1, probability 0, space 0, times 0 [ 895.786458] CPU: 1 PID: 6350 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230721 #1 [ 895.786991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 895.787522] Call Trace: [ 895.787698] [ 895.787855] dump_stack_lvl+0xc1/0xf0 [ 895.788125] should_fail_ex+0x4b4/0x5b0 [ 895.788405] ? mas_alloc_nodes+0x4e7/0x890 [ 895.788697] should_failslab+0x9/0x20 [ 895.788963] kmem_cache_alloc+0x61/0x390 [ 895.789259] mas_alloc_nodes+0x4e7/0x890 [ 895.789548] mas_preallocate+0x1bf/0x370 [ 895.789827] __split_vma+0x191/0x770 [ 895.790086] ? __pfx___split_vma+0x10/0x10 [ 895.790381] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 895.790756] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 895.791153] ? mtree_range_walk+0x5c7/0x910 [ 895.791460] ? mas_walk+0x5c6/0x7c0 [ 895.791724] do_vmi_munmap+0x1e7/0x430 [ 895.791996] move_vma.constprop.0+0x88a/0x1ba0 [ 895.792319] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 895.792660] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 895.793066] ? selinux_mmap_addr+0x2d/0x110 [ 895.793358] ? security_mmap_addr+0x7d/0xa0 [ 895.793671] __do_sys_mremap+0x94e/0x1650 [ 895.793968] ? __pfx___do_sys_mremap+0x10/0x10 [ 895.794298] ? fput+0x2f/0x1a0 [ 895.794537] ? ksys_write+0x19e/0x250 [ 895.794800] ? __pfx_ksys_write+0x10/0x10 [ 895.795090] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 895.795449] do_syscall_64+0x3f/0x90 [ 895.795709] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 895.796079] RIP: 0033:0x7f073098bb19 [ 895.796329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 895.797602] RSP: 002b:00007f072df01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 895.798098] RAX: ffffffffffffffda RBX: 00007f0730a9ef60 RCX: 00007f073098bb19 [ 895.798601] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 895.799102] RBP: 00007f072df011d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 895.799600] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 895.800069] R13: 00007ffc67fc637f R14: 00007f072df01300 R15: 0000000000022000 [ 895.800571] 02:01:33 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 46) 02:01:33 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 46) 02:01:33 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 35) 02:01:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xdc000000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:01:33 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 55) [ 895.848028] loop4: detected capacity change from 0 to 39 [ 895.852232] FAULT_INJECTION: forcing a failure. [ 895.852232] name failslab, interval 1, probability 0, space 0, times 0 [ 895.853088] CPU: 1 PID: 6357 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 895.853636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 895.854172] Call Trace: [ 895.854357] [ 895.854516] dump_stack_lvl+0xc1/0xf0 [ 895.854783] should_fail_ex+0x4b4/0x5b0 [ 895.855062] ? mas_alloc_nodes+0x4e7/0x890 [ 895.855352] should_failslab+0x9/0x20 [ 895.855612] kmem_cache_alloc+0x61/0x390 [ 895.855900] mas_alloc_nodes+0x4e7/0x890 [ 895.856180] mas_preallocate+0x1bf/0x370 [ 895.856464] __split_vma+0x191/0x770 [ 895.856728] ? __pfx___split_vma+0x10/0x10 [ 895.857029] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 895.857418] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 895.857811] ? mtree_range_walk+0x5c7/0x910 [ 895.858118] ? mas_walk+0x5c6/0x7c0 [ 895.858385] do_vmi_munmap+0x1e7/0x430 [ 895.858652] move_vma.constprop.0+0x88a/0x1ba0 [ 895.858981] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 895.859319] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 895.859740] ? selinux_mmap_addr+0x2d/0x110 [ 895.860034] ? security_mmap_addr+0x7d/0xa0 [ 895.860343] __do_sys_mremap+0x94e/0x1650 [ 895.860635] ? __pfx___do_sys_mremap+0x10/0x10 [ 895.860954] ? fput+0x2f/0x1a0 [ 895.861190] ? ksys_write+0x19e/0x250 [ 895.861457] ? __pfx_ksys_write+0x10/0x10 [ 895.861740] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 895.862091] do_syscall_64+0x3f/0x90 [ 895.862373] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 895.862729] RIP: 0033:0x7f68713cdb19 [ 895.863007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 895.864168] RSP: 002b:00007f686e943188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 895.864720] RAX: ffffffffffffffda RBX: 00007f68714e0f60 RCX: 00007f68713cdb19 [ 895.865236] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 895.865748] RBP: 00007f686e9431d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 895.866276] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 895.866780] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 895.867313] [ 895.903080] syz-executor.4: attempt to access beyond end of device [ 895.903080] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 895.904707] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 895.911232] FAULT_INJECTION: forcing a failure. [ 895.911232] name failslab, interval 1, probability 0, space 0, times 0 [ 895.912718] CPU: 0 PID: 6362 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 895.913722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 895.914726] Call Trace: [ 895.915052] [ 895.915353] dump_stack_lvl+0xc1/0xf0 [ 895.915859] should_fail_ex+0x4b4/0x5b0 [ 895.916373] ? mas_alloc_nodes+0x4e7/0x890 [ 895.916913] should_failslab+0x9/0x20 [ 895.917416] kmem_cache_alloc+0x61/0x390 [ 895.917950] mas_alloc_nodes+0x4e7/0x890 [ 895.918482] mas_preallocate+0x1bf/0x370 [ 895.919010] __split_vma+0x191/0x770 [ 895.919494] ? __pfx___split_vma+0x10/0x10 [ 895.920047] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 895.920762] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 895.921517] ? mtree_range_walk+0x5c7/0x910 [ 895.922085] ? mas_walk+0x5c6/0x7c0 [ 895.922585] do_vmi_munmap+0x1e7/0x430 [ 895.923105] move_vma.constprop.0+0x88a/0x1ba0 [ 895.923729] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 895.924385] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 895.925163] ? selinux_mmap_addr+0x2d/0x110 [ 895.925741] ? security_mmap_addr+0x7d/0xa0 [ 895.926327] __do_sys_mremap+0x94e/0x1650 [ 895.926884] ? __pfx___do_sys_mremap+0x10/0x10 [ 895.927491] ? perf_trace_preemptirq_template+0x252/0x420 [ 895.928207] ? fput+0x2f/0x1a0 [ 895.928667] ? __pfx_ksys_write+0x10/0x10 [ 895.929204] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 895.929894] do_syscall_64+0x3f/0x90 [ 895.930388] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 895.931055] RIP: 0033:0x7f5b71e1fb19 [ 895.931533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 895.933779] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 895.934730] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 895.935619] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 895.936503] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 895.937389] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 895.938280] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 895.939194] 02:01:46 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 47) 02:01:46 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20040, 0x1) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000044fb86256cbb326842051dba39367bde630dab00e9210500c5df66f8b883cb3176e3c4f5f87be2f9d06c079e2cfcc4e4dd600d4f", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c653100"]) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 02:01:46 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 56) 02:01:46 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 36) 02:01:46 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 47) 02:01:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:01:46 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 47) 02:01:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 908.560355] FAULT_INJECTION: forcing a failure. [ 908.560355] name failslab, interval 1, probability 0, space 0, times 0 [ 908.561166] CPU: 1 PID: 6379 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 908.561707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 908.562250] Call Trace: [ 908.562433] [ 908.562594] dump_stack_lvl+0xc1/0xf0 [ 908.562866] should_fail_ex+0x4b4/0x5b0 [ 908.563148] ? mas_alloc_nodes+0x4e7/0x890 [ 908.563436] should_failslab+0x9/0x20 [ 908.563698] kmem_cache_alloc+0x61/0x390 [ 908.563985] mas_alloc_nodes+0x4e7/0x890 [ 908.564272] mas_preallocate+0x1bf/0x370 [ 908.564557] __split_vma+0x191/0x770 [ 908.564819] ? __pfx___split_vma+0x10/0x10 [ 908.565127] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 908.565509] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 908.565924] ? mtree_range_walk+0x5c7/0x910 [ 908.566235] ? mas_walk+0x5c6/0x7c0 [ 908.566499] do_vmi_munmap+0x1e7/0x430 [ 908.566767] move_vma.constprop.0+0x88a/0x1ba0 [ 908.567093] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 908.567434] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 908.567835] ? selinux_mmap_addr+0x2d/0x110 [ 908.568132] ? security_mmap_addr+0x7d/0xa0 [ 908.568440] __do_sys_mremap+0x94e/0x1650 [ 908.568742] ? __pfx___do_sys_mremap+0x10/0x10 [ 908.569069] ? fput+0x2f/0x1a0 [ 908.569303] ? ksys_write+0x19e/0x250 [ 908.569576] ? __pfx_ksys_write+0x10/0x10 [ 908.569861] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 908.570221] do_syscall_64+0x3f/0x90 [ 908.570480] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 908.570834] RIP: 0033:0x7f5b71e1fb19 [ 908.571090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 908.572265] RSP: 002b:00007f5b6f395188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 908.572781] RAX: ffffffffffffffda RBX: 00007f5b71f32f60 RCX: 00007f5b71e1fb19 [ 908.573243] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 908.573723] RBP: 00007f5b6f3951d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 908.574187] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 908.574655] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 908.575129] [ 908.584199] loop6: detected capacity change from 0 to 40 [ 908.591966] loop4: detected capacity change from 0 to 39 02:01:46 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 48) 02:01:46 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 48) [ 908.643858] syz-executor.4: attempt to access beyond end of device [ 908.643858] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 908.644800] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:01:46 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 57) 02:01:46 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 48) 02:01:46 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 49) 02:01:58 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 58) 02:01:58 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 49) 02:01:58 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 50) 02:01:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:01:58 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 37) 02:01:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xfffff000, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:01:58 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000003fc0)={{r1}, {@val, @max}}) read$hiddev(r2, &(0x7f0000000140)=""/169, 0xa9) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003b40)={'erspan0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000180)="f51382610d2d346b9b49aa99e365a86ccf385dc16b6bb12a7521b2ba8307abae34ee996e80532c1222804fafbe2074b6033ff2b69c2caad8442392577f68d852f547f9fcfb8b01b5710c4632f3a07879eb9942ecb3d167da7a1107c27115a64db8dc1e6872d760e14c38", 0x6a}, {&(0x7f00000000c0)}, {&(0x7f0000000200)="ec03a45a6a32aa3068e8c6f1b41ccc25fdb0c518f1888ff3b52b1b6da3521d6579dacca86d67edcb6bc147f06a0695181c1b2fcdc4854582bbf048436ed5fda48d2621326d005754eae6c675a62bfe6781828379340f4719de8f033ab1b8eab98d186ce0783324eebd330af18c6ec8f2ea44e099c0d5f66e37e92e61e4a3251805b9e753ff809c9fd4571365e121e2b9dfc0df0cce102bca37cc71a84bb0e75836152dac356c58b298bed2bd03bb3ddcdb3d375bc73a530d1ba3ec79e831f45fddb8653960e715447698db0ad71c79a940a38e", 0xd3}, {&(0x7f0000001400)="d1fa5902b519d2fb31b4085024fc515840536d7adfd5f4eeaa299a41ba6684f0382049ad6cadcabb7a7f35c6a22e35e56926c7258feccfc54a20521c3716c3d0ffcea1fb9c0ce167ae582d3db061b10760ac3b1f87f39e9922c392", 0x5b}, {&(0x7f0000003b80)="fdcca4dfedf4d08d592520be58502b8231b571bce45cd6dd2e03560b2ec75fd7ced844c414552dbc011f38cf1f80f10390f9132b91d2a9607310ec13f8e745f28ff7e20dd79e73b412ddaab41f491f59258d9feeacde9ac0e49ef73eb3151c5a8a", 0x61}, {&(0x7f0000001500)="896b02b89d8f936f9c10da24c5deff92eb2bc47b829c28f66051527fd6bc5938ee308c870437974b904942d6496f4a876d6de8ef3ce8f1b019854269afa2fba73f4430965a2025116b7701646045fe2fec092631df286627c78bb2312986c4dc9d1714c23a9c5a7a62f80325d2361bae41", 0x71}, {&(0x7f0000001580)="b57669ae6dce35238161f88ba617d44d0d437b4e6044d3d4436da944f134521b74b9baa4a0263aabecb2bcd1b881527a9316120d5dd427153264a71ef1f5b741a30072d99b76b89d5a9196bdf547ae015a3ed7420ed322c90a7909acacdb47e2d9ce45357fe498e28b1fecc856ac404cb3917566edc590b25a7cc34dce1f8fddbba8f6c7cf4f16e4de6a105bdff4210895e1438565d5488a5be291fc574fe1a8e39bf615f2208a0e340cf8dd21ee6575346d56b50fcc32cab2faab166bf92219f6cc29829071e302ac3fde81709ccfcd936101f66a01d942e94c42cfff53a912b73dd904d14a84cf748b1036fc5db272", 0xf0}], 0x8, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}], 0x18}}, {{&(0x7f0000001700)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000001740)="755122a9d64667d208950a97a66e238221ab6a86edbcf2ee5bd23014680346a74d2417a56dc2f4c4238b042d0629", 0x2e}, {&(0x7f0000001780)="47693e40ad4f183bab056b84f0cc5da381fd1d7fa7a03ea5ee83c3b85ee284347ec7a55f295f46e9e59a0947aba749e7294a87277372304649e9ebcc27e8dd9fdee6d55507a14f268d7fff5bb0429fade902db674e17", 0x56}, {&(0x7f0000001800)="994f27f5b7b5d2500ceced714dc4ac16639fa7a651850be3c81c6a1595e3231a07473789b0ca4ed98620804f9d54bfc1c2950883b5dead35f6a08049cbb0cb08904b2d8a600b5d", 0x47}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="c400b3ba3ac47740a0cc6094072bd587f4ab63628a295bdbf8b9662afc2bc3958b597b1ecb3496236829a103a56056761af010c19a89564a5227db72651da67992a9e7c8208d304148cfc7ef4f2d79a3c4e3774e2bcff94f85d114850097f3394516b1e79e0fcbd9079b640c92a5fb0464f40218ce18f129c3703b3dbfb60883e5b27526c41e2bb652dac1eae7a48b31a76408af31f91919033b8aa81f71490c879464f368e7f6a0e09765c2dc551165c011af06", 0xb4}, {&(0x7f0000002940)="613690594d391b4713563042e89bef0c4e46f956c4df13ed247bd2b8a48b75d01423e21121a5829c51950120b6a70d362bf836e7322c0ba84bccbcac82eb7f6a98198af57547c266231b14a5a143c1d988444d03d66a6161a872afae8f4afebf557753d5c10416a7305e403bfb9e98e86fc44f395c96128644528c446197f0a64a6a2cd8707f8c34f92afd84437404c7cc78ee8dc5ea32e4fbf0654e002f5c670f68009fd8d70e822bd8fc01e3450e4f93ca85ed91b5ad5417f77b530a3022c86c09375e5aad4f16f4", 0xc9}, {&(0x7f0000002a40)="476c2a62d1e9dae29fa20f8e6ad6f3058883a47701368be4fbbb44252b2d09471a3b92da1fc7d539f8dfe8f78daf9b18ee8268ca1b0cd383ffa282b6089b063bac7afdbe081525b75887349eefaf9038b4883d", 0x53}, {&(0x7f0000002ac0)="97c744a18ccfe130fce8db68d2a4a619147acad77a391cb89b0665ef7c7671a57ff23777aab3b4332de32e54bfc6817a1d8aa42105700772c82b64bc2fb575b47233df04726efb4fdea372ca36b8a60358c96b0d96c1bc9492dce16898d80277f652f0c450f215dd2d5c71be399a98e2b535784a47726bef4194dc0243a8466a84394c3ebce6a9fba42089c4a69d07dcc894a604ad9576d63c5f8c0ca0e9474d31afe9bc7842e071739a1e3ec6463095aa3b04bb03c530e44652edd0c375b5f9c54d47bc49892013bebc2515b3e6bfd0fd7a342935e8e90fa45773e934e25ff0db5a3a8fd2213ca46083b6fe4d42d1b770e016a59e871afd9e1e09c56b2681785063760e90b884a225b6fcd3b4f47b188181aee92dbd774538ac19d582eba7e2a3bc993c2186c1b11c8f6e4ce51d56090a42cf8d880f74c6e334de8b1d21fc12d36bc3c06819c738b5b1c653c97efb6f0a3613f2f197e9ce07822ee89a4adc88157a6feda9e857bdb54984ef9ec3d1385e287ffb6d9bbed289af47f028d1b422d82a7c3ab06a8e8095e2d89ddccbec946d5aa4ad9f645958aa346b8883fc145bb18a98bcabddf4b71238fd25f50fae97878e46fc43bd956cb5d5320fe511b05d6d1bba90f0fdef2e6989c6f1988feda3868a3879a0447a8662beeb817dc34ebf6fd65242ab61c1e611879d8139c8ace5dd6d10e7e4ea19b8f76bb3d8c6b94b0815cb8d66bb92bdab50e58b34283d105b5bf006869dfa8f78a7ad3aa04bb52a07fd7c3df30f59eb808d52e7acafa1b27c1c9c9b8134ae365dca0b11d717002a2a8d09e5514491ab7b0290aedc49263621c92bf2f75f58c857706939047d073e92364fd89fc2d2c7e6b6e3ea008c4164f003e051ea27c6a0f2c31a3801650f68512b969f29ae22cfebb5b80407b6aa4cd1ac7d4c82abb8dd56acf99f075351805fc84d5e171c9bb338fb1cfea14129006d251d972f7e67728693f3a096fef787a4ea775297ee589ac2c827936ca97df46592e66501035cec30c3458c099adffa71ddd2c8f46049401ea6ec82921e859f175416daffd82238fe459d943d6b8016de94c72a8829c45c8c5316aa7a1ef74ef6431a86912bec7703fd3db64ea9dd36d6a9a2ac4f0fbd0e4d34cdc3ee860a86288231a572dbf8688fd8003c1c8e0f918dd7562c6ea3715396e081095e19e8b89a0aa3ae83d95e8e4a9a0b551a03ca9f8785403a82b0e3fbed0e6d3dedf8f820bf14e539055d39180092d0b86dec332308ac9d1c7270e877bd8232671e1ebc187394fa24283923e9b32094432228b3bc203c703db59b72f09207724d68864ec18b95db4050ae056abbba290499ec1db215e7940a4117d52527cf18e23e59cf30e6cc6972c033ac2a24721018bc3d5e9fcd900e21166c91dc82139be368d5877368cc81806858baa2eb531175068f33e051a2ecd285ddccda4a3643c3894d19189d6cdbc36d45be31116185258f8ccf54bc11feaa768e1b1ae08dc42f4fdd9781bd60e11c4d948a43710c1f4f41b1d5caf6fed47451d49dde7a17758175e53bf46ffbe73e1059bc2a4a029459cf1865f1cd6698096a16960ade3025407e581426fa778bc7d77d3f5ba29b480d89a323001d3c51d8485e49baa5537a7d680e9eaf40a4471f5021a64541c8930a7e1f48e7a57d794c68b9e59eeb43ce708c485ed5864c2f689c0d63ca61fc4177ca6fc4e1f7da6d7b032376ec219ea52a90da500eb6f5387e3107b8c8e9420819484ec2215c7d6b9321e20298e0dc7617cf668a2f4c4adc90ccce49e8897bb2a336ba55e63cb52b999d040cf39d0751b3b6308fa0056e3a1b50ed4f536d3dd7d9c181d5be0314bf72b1c5e081f939f4f1cf0d8134e6a377ffadd27b4cde2619ceca2ed8085f9029d57d97d5a8ea5d8fb26dc650ec1e0cd8d44c730c9b2418abb2edf6fb198836256f67d5b5497d60ac0e78c7675b34e8ec2935568d9a081ce773ea5c8eeacf9d23dad6958b8c8f6f5e3694942a4b824fe2c4b440c7d892a68f960c77a02c8696d0b6c2c2743d25c2d2f22367d7e3f1492cfd25c7482f38f699e87456e7e55ac787b2187f0850d9ce3a2f6fc38f84f6dd1473d93c3b767ef1561217c4fe58ba5312aaef1a7f754a1ca92637056735b556a193cc44cbb6b8741f98408223aa6bbd87912c3fbfdbeffbc91a29857be07c17f67b47a36ec7adc70ceaa0d4e2a5889a797b33261376228520163291b1bb8a6c867fa55ef004f30951b02f2dad4ec5f5c48e6b3faffd60790981a351a240d5e111922e3839c0fcfcd29541a1a6a18e0bdf5eb1194d56d167db35ff060f988663f992b52606c7ab03863c9b481b236d339263b750716e27cc4c365181dd4c4bb0ba716e61d8fc98afbf9fe8695e204a56c33399511f42ef0728057c476b0f276ed4e10f7fecbf3fba1ca20a8958a54989539613bcd1275f5d371740887de25de58e5f2f57dbabeb21dcc3d292c3adc047b55cd222f6e1c9f86fbf21b5733efd027263cb965fc03ede26284580ec0db32fa3094db2e3b6f986e5ace19e57aaf69b25249f8f0920d73072948aee6673bbe993f99ebd8f8f6553f29dc5f1e2999ac019ab83ebeefcb92a9f6964f5b20d39f600a761a8f6d1e16a212017b95cf998a185905cb4273879121c403cf938def6007aae963a2bd6c74db089c6d142ac0fc827304c016cbb94a9409cb7d5c412ad45d6ab5895a80000a0f455491c7d01c7e4324036339c4f94419b1664298a3cdc758538084309c35a28612c6638567d2d232b10a7a5ec445a9bb915fc7861f4454ddd3cb7c4c9691fecc8956971e48d8d36b388eda056da4446d12173cf724c7f81c065f4bae46a1b4a587057fdde46fca20c6a9d9afa8888598f7b36c1e2fad5ceb8352540d3858310d04a8f1c64de56df2cc8d096e11cad926f5903c884b2717e4d3ea3a7e0e2ee1160e25719725c50cf5d6c36da340d81bc660961c44a9cecad6b08c5026139196251d66ecb2a6864da8accec2d5eaf46010361a33a64c8b72032b2d01c901734432d46c5b7dab4f6ec7cc1510502d99ed438505da976ca4689445a565f778f41b5bf732d68914f7f33c57b0a499a9c0a52502383f66a42f68b739d80e630fcc89ec33f6806695f1dee07b470420306bf2dbea3ce0cd9e5890d81dc2af5fcbeab35d1b91c0c10e8583fdf9363be8b746ca62864dd849552c0209a6bd85e0f7ea6907d22a2501cbefc39f22fc6cdb77d1adaea40dab61e299dc0d6a5bbbddcea90b05f0cc3a2d10a68aaafc7b511ff13409fb3dbd3e8c1ae68aa763f84a2bd4179e4a9b0e280abe197ffdd7c957f53cc04cad533751bc632a4062c2f8f2dbcfe06f07b88bfd503479f5f10379e25c39f173f8b96575bd8de9707e4d87ecfe357362bade400fae45b63dd44d241d93c6748a7d7b8342c2a969e89e61a7fe195682d9071fe414042118b5f34c846455c31bae01e2368e076ca467fdb2723011a7b062b7268dddff003e37c1ccf52a81eaa0fe5dfff38a0e55f5f979c9eef9c19cb546fb6847410b8e9aeb03dcedd96b09068ecd1888ee01ebe2e2eeb38290bbe8c1461fb71805a865c36f260d09e75ada4bf42a7e14b2c8df9338272fb72d09011a57c07507931344c4cc8d17d4ba801368649c55c842497165746e7678c7e7b1e0009341c4db8754fe51b3263e0db7c01884b051c8055cc2a625864d13779e96e175d3b2c305461c3d5b170caca8ab64457966cb24aa1d0d9155794357772ab46b0e78a1bb3bb392fbdc4d0b46e60eb90e9a685b1ac84ad56d9b01be87922bc2b79a88a2ed1a6897b65fbf61cf5b4ef17249499d3c38bdc2ebef768facba77e75940bb78cef9348dba5d14cc75481b0607c098c16a342a8a723162eecece2bf53ed3d2ba4b61354db4cdb59eea4f176b79f8dc0142deadbff72f20b942d5526f245275ffff020309ef1f3aaf581c3a7c8de65857f68eb9c7de8aa90e1b7ce72764282810fe8b48cabe73b36e23d76d64f3e631fd55d5316bd59cea5fb724767ac6c5703e168950def5637da4a2518f2e8c5286d12a0e30a356f7f860bc1f0592392056da86d9c13c96455872b9eeef70448019e16e34e7dfe84ab562c87a67446f5b7a22f551bac3983c51f49477686ebe663c35d037469a1d9330455562ba265759356673157664455b62db167cceec1f64edbff4a98d92e81922b8549b1b2f507a01c58a8c7d37b8dce2e071f8e4695b51fa20ee8c871e0e389a9cb9737d9e78c2aed8c11889d0c8468e870c6294a08fac4f560d1e1a9f26532f6d9cf3959a347118c02546ffc675ea7bb52d98a87e0d3644bc8df67ea771ecd1acdf69c3faef451cd635f58ee80fa047ae389d579815b2281bab0cd14eb4283d9267f56422abff5e794e6153dc46e979c839222d8cf993ddf92c287533b1e41700356e3a4074ac19aed6d27404128cf5024816f94186539e7b8d5fa95464bd650fafb2e009c804f521747179ac9c75528a1d588ddfb90ba132654ec32047f6b2cabc8c39586f41a7f101578c34ebc0c96e530d22d2bb07bafd7bcfe82c89cba88652a513b051e327b0c53ac5cafdff15cf50ffff60a8c735366fa79a0e8d32204a579cbd5f77d3f3a55ca21f72fa4b33e172c82c8c28d11db9a11bede77bc9f5162928254c4b085f3c7075a5c0fee5c4eec8dbe507e37e0e44f8e319eba5ec7a186f957ff1bec8af13a5c28428f486a946f4fa7fcbcb8816771a507ff129628f066c6492966bf87c738cd04a960c79c727e18f50de2b77f09157fc215b0b77a2bc9d9b8151ef7f83dd0b2f325442ec936f2c6feac826ccf4002d909a428ebb9b107f3f3e5d79ae749d06d61a57d8182b98e70d17e3fffa025af6b5ed4f4976c519ae93c354952949c7bbb61dc883b59b651c3bbab5aae622d20f320ae33ce431758d589f6bf301e231d74d0c7e71d24e6265422558307bc485e5ad1abe05a361de39b8446ebc12ea3a881a6b224adf36c4c1bffb7bb5a409d3dca34c3d163a8089543cee83d56e4790df27702342eea50b92f81434b138c843e60e089dda119e1989d40b4581f53388d1661ad2b898ccec11540ecb53a8e99d903ce082519f2362ba6288e89e6a50e78f94313847b7f99b68f1151242bb4e8981a76f70f93be7641b8719855f343815d847b29745773cc04546098e88242c11c389d6a441249962d8e05aca0d43a329f5bc78a9e2c659d3add6c7541f91ca1f99e824de8005ba838e4b3fc3e34e7340cc5a823438b34efe3bdc20cce8732265f030e9cfacaac5c0c3468c2f51b494f9a473361d7021f6799c869a15bf818d6f8180a1612be6e1ee15554bed6d359d49076f59a723683d8f26c787fd6a6d454f794b3aa328fd99e340fb085abd6d951b3b68e827fddfa8d386870f999b805bb360b753f9fefb6507b0a6a86627e8e98d8eabc8f68cffe0ef198944a40cc72ba3306b74a804e8e31488cea376af575e364fbfafeacd9570962ae6feb1b9bc2401f36d7bad024cce12b39e4d602a91f7beff37686e56ce1aa030009f0d035d7930f8f2236883bf8f9c65b537b8473737d1e457b2db3aea6b8e6d48bc164213babd8a75ada20c71ccb638306d334c9c0556ffe48e3148573d9c02ef295b4bd3efcb3ceda58dbbdb6fec89bd3e003c7c403d9532953cbc3019e230be0eb2fc55b4b29a4ec5c4c91b4265b8dad403c4242e84459be87989577fc8fb3d494be76f9083fef4be932de871ec12fa2c1d26a42501059703ce68b452b62efbb0a340d03fa45d365c151c3", 0x1000}], 0x8, &(0x7f00000043c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x86, 0x2}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x29}}, @ip_retopts={{0x90, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x24, 0xd4, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x1}, {@multicast1, 0x1}, {@private=0xa010101}, {@empty, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0x78, 0x1, 0xa, [{@loopback, 0x7f}, {@local, 0x752}, {@remote, 0x6}]}, @lsrr={0x83, 0x17, 0x9f, [@local, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @local]}, @end, @ssrr={0x89, 0x17, 0x99, [@remote, @rand_addr=0x64010100, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x12}]}, @lsrr={0x83, 0xf, 0x27, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}], 0x158}}, {{&(0x7f0000003d00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000003e40)=[{&(0x7f0000003d40)="5fcbb2b0267d5d9e4279353cc4702a8e1acd63b929428ed43b3a1de51bcbe1b632f95c36c2e7f35763e84408d36d76df4e22f6b425dfc367afef84ea6cd112eee9fdcdef7c6cfc466a3c1b3ea95be31a55be", 0x52}, {&(0x7f0000003dc0)="47bb4bdaa8d6d9fb9f0bf1907b33dfae782706489860e523250d3f12dd8ef52e82dea16a61bbbd9c4e465246f93eb3fe2cf670487aebfa7a9eaf4781cefa7daf6a4b4eeb7cd68b0322818c0c3f4bd6d41e64a14ce66cdbc3587effb59a23977d5f8b4f2ba4", 0x65}], 0x2, &(0x7f0000003e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x33}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x8b, 0x3, 0x0, [{@broadcast, 0x3}, {@multicast1, 0xffffffff}, {@broadcast}]}, @rr={0x7, 0xb, 0x91, [@remote, @rand_addr=0x64010102]}, @end]}}}], 0x70}}], 0x3, 0x4010) recvmmsg(r2, &(0x7f0000004340)=[{{&(0x7f0000004080)=@nfc, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004100)=""/190, 0xbe}, {&(0x7f00000041c0)=""/123, 0x7b}, {&(0x7f0000004240)=""/86, 0x56}], 0x3, &(0x7f0000004300)=""/15, 0xf}, 0x3}], 0x1, 0x10002, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000004000), 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000004380)='./file0\x00', 0x444400, 0x23) setsockopt$inet_mreqn(r6, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000004040)={{0x1, 0x1, 0x18, r6, {0x9, 0x401}}, './file1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/162, 0xa2) 02:01:58 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 49) [ 920.507324] loop4: detected capacity change from 0 to 39 02:01:58 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 50) 02:01:58 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 51) [ 920.541385] syz-executor.4: attempt to access beyond end of device [ 920.541385] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 920.542228] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:01:58 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 59) 02:01:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:01:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:01:58 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 38) 02:01:58 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 50) 02:01:58 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 52) [ 920.722740] loop4: detected capacity change from 0 to 39 [ 920.748243] syz-executor.4: attempt to access beyond end of device [ 920.748243] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 920.749156] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:01:58 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 53) 02:01:58 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 60) 02:01:58 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 51) 02:01:58 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) mkdir(&(0x7f0000000000)='./file1\x00', 0xbe) 02:01:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:01:58 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 39) [ 920.857853] syz-executor.6: attempt to access beyond end of device [ 920.857853] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 920.861513] FAT-fs (loop6): unable to read boot sector [ 920.863826] loop4: detected capacity change from 0 to 39 [ 920.863886] FAULT_INJECTION: forcing a failure. [ 920.863886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.867165] CPU: 0 PID: 6444 Comm: syz-executor.2 Not tainted 6.5.0-rc2-next-20230721 #1 [ 920.868209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 920.869254] Call Trace: [ 920.869603] [ 920.869926] dump_stack_lvl+0xc1/0xf0 [ 920.870449] should_fail_ex+0x4b4/0x5b0 [ 920.870993] _copy_from_user+0x30/0xf0 [ 920.871529] kstrtouint_from_user+0xb0/0x170 [ 920.872134] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 920.872810] ? lock_acquire+0x19a/0x4c0 [ 920.873350] ? ksys_write+0x122/0x250 [ 920.873908] proc_fail_nth_write+0x7d/0x270 [ 920.874495] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 920.875166] ? lock_is_held_type+0x9f/0x120 [ 920.875757] vfs_write+0x2b9/0xda0 [ 920.876234] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 920.876900] ? __pfx_vfs_write+0x10/0x10 [ 920.877452] ? __fget_files+0x267/0x480 [ 920.878042] ksys_write+0x122/0x250 [ 920.878552] ? __pfx_ksys_write+0x10/0x10 [ 920.879119] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 920.879828] do_syscall_64+0x3f/0x90 [ 920.880357] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 920.881050] RIP: 0033:0x7f8595d695ff [ 920.881544] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 920.883869] RSP: 002b:00007f859332c170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 920.884858] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8595d695ff [ 920.885793] RDX: 0000000000000001 RSI: 00007f859332c1e0 RDI: 0000000000000004 [ 920.886716] RBP: 00007f859332c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 920.887639] R10: 0000000000000003 R11: 0000000000000293 R12: 0000000000000002 [ 920.888566] R13: 00007fffa8d1394f R14: 00007f859332c300 R15: 0000000000022000 [ 920.889527] [ 920.907148] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value [ 920.947775] syz-executor.4: attempt to access beyond end of device [ 920.947775] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 920.948681] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:02:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xffffff9e, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:10 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 40) 02:02:10 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:10 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 54) 02:02:10 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 51) 02:02:10 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xc99b5e00381af50, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x188400, 0x82) 02:02:10 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 52) 02:02:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) [ 933.171077] loop6: detected capacity change from 0 to 40 [ 933.171671] loop4: detected capacity change from 0 to 39 [ 933.188079] syz-executor.4: attempt to access beyond end of device [ 933.188079] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 933.189053] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:02:10 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 55) 02:02:22 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 56) 02:02:22 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 53) 02:02:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:02:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:22 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:22 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 41) 02:02:22 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 52) 02:02:22 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r4, &(0x7f00000000c0), 0x0, 0x803fffc) renameat(r3, &(0x7f0000000180)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00') write$P9_RREADDIR(r2, &(0x7f00000000c0)={0x2a, 0x29, 0x2, {0x200, [{{0x1, 0x3, 0x8}, 0x52, 0x8, 0x7, './file0'}]}}, 0x2a) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:02:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0xffffffff, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:22 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 53) [ 944.986371] loop6: detected capacity change from 0 to 40 [ 944.988667] loop4: detected capacity change from 0 to 39 [ 945.043147] syz-executor.4: attempt to access beyond end of device [ 945.043147] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 945.044044] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:02:22 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 54) 02:02:22 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 57) 02:02:22 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3003, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:22 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 54) 02:02:22 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 42) 02:02:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xf, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 945.132398] FAULT_INJECTION: forcing a failure. [ 945.132398] name failslab, interval 1, probability 0, space 0, times 0 [ 945.133228] CPU: 0 PID: 6512 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 945.133809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 945.134408] Call Trace: [ 945.134596] [ 945.134762] dump_stack_lvl+0xc1/0xf0 [ 945.135057] should_fail_ex+0x4b4/0x5b0 [ 945.135368] ? vm_area_dup+0x20/0x160 [ 945.135659] should_failslab+0x9/0x20 [ 945.135941] kmem_cache_alloc+0x61/0x390 [ 945.136267] vm_area_dup+0x20/0x160 [ 945.136551] __split_vma+0x173/0x770 [ 945.136837] ? __pfx___split_vma+0x10/0x10 [ 945.137172] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 945.137587] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 945.138037] ? mtree_range_walk+0x5c7/0x910 [ 945.138376] ? mas_walk+0x5c6/0x7c0 [ 945.138667] do_vmi_munmap+0x1e7/0x430 [ 945.138966] move_vma.constprop.0+0x88a/0x1ba0 [ 945.139333] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 945.139710] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 945.140165] ? selinux_mmap_addr+0x2d/0x110 [ 945.140481] ? security_mmap_addr+0x7d/0xa0 [ 945.140826] __do_sys_mremap+0x94e/0x1650 [ 945.141159] ? __pfx___do_sys_mremap+0x10/0x10 [ 945.141506] ? perf_trace_preemptirq_template+0x252/0x420 [ 945.141918] ? fput+0x2f/0x1a0 [ 945.142179] ? __pfx_ksys_write+0x10/0x10 [ 945.142486] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 945.142884] do_syscall_64+0x3f/0x90 [ 945.143165] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 945.143561] RIP: 0033:0x7f950ebfeb19 [ 945.143836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 945.145151] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 945.145706] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 945.146228] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 945.146749] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 945.147261] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 945.147776] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 945.148258] [ 945.239718] loop4: detected capacity change from 0 to 39 [ 945.264633] kworker/u4:5: attempt to access beyond end of device [ 945.264633] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 945.265705] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:02:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:02:33 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 58) 02:02:33 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 55) 02:02:33 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 55) 02:02:33 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 43) 02:02:33 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@broadcast, @remote}, 0xc) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x184007a, &(0x7f0000000540)=ANY=[@ANYRES64=r0]) r3 = fsmount(0xffffffffffffffff, 0x0, 0x9c) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000440)='vfat\x00', &(0x7f00000004c0)='./file2\x00', r3) lstat(&(0x7f0000000580)='./file2\x00', &(0x7f0000000180)) chdir(&(0x7f0000000140)='./file0\x00') accept4(r0, 0x0, &(0x7f0000000200), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101042, 0x18d) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@rand_addr=0x64010102, @empty, r5}, 0xc) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000500)={@local, @broadcast, r5}, 0xc) getdents64(r2, &(0x7f0000000340)=""/162, 0xa2) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="a8a94f4b2bc7afc3c4afd309b615bc2430e8d7b6db533f7c4ab5666262fd482938e0d1b142e3d7a1718c0848c6655d1e01c338dbb49b3a4ce3a84f37af981f8a8aacbf247d3bbe79a208a9465bfb0805b2b9f6aff53088f875118673ef9d40e569ea92f8373dc8d1632ee2d2f3592504a7ab76eaca59fe110bc49095c1c5f7b90a115b00619c771eb49fc790fb3544f2e030627866cb8a776fde81f1d11a9b2efe27b1279219a761fc3e8724", 0xac}], 0x1, &(0x7f0000000440)}, 0x40000) 02:02:33 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 956.225968] loop4: detected capacity change from 0 to 39 [ 956.258569] syz_tun: entered promiscuous mode [ 956.270600] syz_tun: left promiscuous mode 02:02:33 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 56) 02:02:33 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 56) [ 956.342435] syz_tun: entered promiscuous mode [ 956.344647] kworker/u4:5: attempt to access beyond end of device [ 956.344647] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 956.345987] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:02:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 956.353848] syz_tun: left promiscuous mode 02:02:33 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3007, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x39, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:33 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 59) [ 956.428115] loop4: detected capacity change from 0 to 39 02:02:33 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 44) 02:02:34 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 57) 02:02:34 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 57) 02:02:34 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) openat(r1, &(0x7f0000000100)='./file1\x00', 0x121e42, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:02:34 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 60) [ 956.587995] kworker/u4:5: attempt to access beyond end of device [ 956.587995] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 956.589641] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 956.663918] loop6: detected capacity change from 0 to 40 02:02:45 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 45) 02:02:45 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300b, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000000c0)='./file0/file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat(r1, &(0x7f0000000040)='./file0/file0\x00', 0x1b98c0, 0x30) 02:02:45 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 61) 02:02:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x71, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:45 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 58) 02:02:45 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 58) 02:02:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 967.988984] loop4: detected capacity change from 0 to 39 [ 968.018081] loop6: detected capacity change from 0 to 40 02:02:45 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 59) [ 968.047084] kworker/u4:4: attempt to access beyond end of device [ 968.047084] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 968.048828] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:02:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 968.076644] FAULT_INJECTION: forcing a failure. [ 968.076644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.077550] CPU: 1 PID: 6589 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230721 #1 [ 968.078088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 968.078648] Call Trace: [ 968.078829] [ 968.078990] dump_stack_lvl+0xc1/0xf0 [ 968.079261] should_fail_ex+0x4b4/0x5b0 [ 968.079548] _copy_to_user+0x30/0xc0 [ 968.079811] simple_read_from_buffer+0xd0/0x170 [ 968.080141] proc_fail_nth_read+0x1a6/0x290 [ 968.080454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.080795] ? security_file_permission+0xb5/0xe0 [ 968.081153] vfs_read+0x1de/0x8f0 [ 968.081399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.081731] ? __pfx_vfs_read+0x10/0x10 [ 968.082012] ? __fget_files+0x267/0x480 [ 968.082320] ksys_read+0x122/0x250 [ 968.082579] ? __pfx_ksys_read+0x10/0x10 [ 968.082870] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 968.083239] do_syscall_64+0x3f/0x90 02:02:45 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 46) [ 968.083499] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 968.083993] RIP: 0033:0x7f687138069c [ 968.084248] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 968.085431] RSP: 002b:00007f686e943170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 968.085942] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 00007f687138069c [ 968.086442] RDX: 000000000000000f RSI: 00007f686e9431e0 RDI: 0000000000000004 [ 968.086956] RBP: 00007f686e9431d0 R08: 0000000000000000 R09: 0000000000000000 [ 968.087466] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 968.087968] R13: 00007ffed7ec9f6f R14: 00007f686e943300 R15: 0000000000022000 [ 968.088495] [ 968.121227] loop4: detected capacity change from 0 to 39 02:02:45 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0xa0b}, {&(0x7f0000000180)="69242df6d65d65d360fb49578f8828c4b5b27267c01d77893b06f81bfe7f2af71581f1597907a140849027053ae3af30353178a5dcd6fa3eba70a287f40fbd35831c010ee69d5ed27cf062ec7e61e0f0cf076a21b30e929e4996ac2401b867", 0x5f, 0xd43}, {&(0x7f0000000300)="d46f090000801e384665877f", 0xffffff48, 0x1401}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000000)='./file1\x00', 0x581000, 0x9) chdir(&(0x7f0000000140)='./file1\x00') getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) read(r0, &(0x7f00000000c0)=""/47, 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r1, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) statx(r2, &(0x7f00000002c0)='./file0\x00', 0x4000, 0x40, &(0x7f0000000400)) [ 968.182125] kworker/u4:4: attempt to access beyond end of device [ 968.182125] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 968.183735] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 968.196597] FAULT_INJECTION: forcing a failure. [ 968.196597] name failslab, interval 1, probability 0, space 0, times 0 [ 968.197436] CPU: 1 PID: 6596 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 968.197987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 968.198553] Call Trace: [ 968.198736] [ 968.198900] dump_stack_lvl+0xc1/0xf0 [ 968.199176] should_fail_ex+0x4b4/0x5b0 [ 968.199461] ? mas_alloc_nodes+0x4e7/0x890 [ 968.199760] should_failslab+0x9/0x20 [ 968.200023] kmem_cache_alloc+0x61/0x390 [ 968.200312] mas_alloc_nodes+0x4e7/0x890 [ 968.200600] mas_preallocate+0x1bf/0x370 [ 968.200895] __split_vma+0x191/0x770 [ 968.201161] ? __pfx___split_vma+0x10/0x10 [ 968.201469] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 968.201853] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 968.202264] ? mtree_range_walk+0x5c7/0x910 [ 968.202583] ? mas_walk+0x5c6/0x7c0 [ 968.202851] do_vmi_munmap+0x1e7/0x430 [ 968.203120] move_vma.constprop.0+0x88a/0x1ba0 [ 968.203459] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 968.203817] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 968.204225] ? selinux_mmap_addr+0x2d/0x110 [ 968.204523] ? security_mmap_addr+0x7d/0xa0 [ 968.204846] __do_sys_mremap+0x94e/0x1650 [ 968.205156] ? __pfx___do_sys_mremap+0x10/0x10 [ 968.205492] ? fput+0x2f/0x1a0 [ 968.205731] ? ksys_write+0x19e/0x250 [ 968.205997] ? __pfx_ksys_write+0x10/0x10 [ 968.206306] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 968.206682] do_syscall_64+0x3f/0x90 [ 968.206969] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 968.207358] RIP: 0033:0x7f950ebfeb19 [ 968.207639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 968.208934] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 968.209494] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 968.210005] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 968.210539] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 968.211064] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 968.211576] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 968.212104] [ 968.302082] loop6: detected capacity change from 0 to 32766 [ 968.303899] FAT-fs (loop6): Unrecognized mount option "./file1" or missing value [ 968.386666] loop6: detected capacity change from 0 to 32766 [ 968.387599] FAT-fs (loop6): Unrecognized mount option "./file1" or missing value 02:02:57 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:57 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 47) 02:02:57 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300c, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x140, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:57 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 59) 02:02:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:02:57 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000fc01", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x10) copy_file_range(r2, 0x0, r3, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getdents64(r0, &(0x7f0000000340)=""/150, 0x96) 02:02:57 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 980.288236] loop6: detected capacity change from 0 to 40 [ 980.298210] FAULT_INJECTION: forcing a failure. [ 980.298210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.299034] CPU: 1 PID: 6611 Comm: syz-executor.5 Not tainted 6.5.0-rc2-next-20230721 #1 [ 980.299586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 980.300133] Call Trace: [ 980.300317] [ 980.300480] dump_stack_lvl+0xc1/0xf0 [ 980.300762] should_fail_ex+0x4b4/0x5b0 [ 980.301048] _copy_to_user+0x30/0xc0 [ 980.301327] simple_read_from_buffer+0xd0/0x170 [ 980.301655] proc_fail_nth_read+0x1a6/0x290 [ 980.301963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.302299] ? security_file_permission+0xb5/0xe0 [ 980.302658] vfs_read+0x1de/0x8f0 [ 980.302904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.303248] ? __pfx_vfs_read+0x10/0x10 [ 980.303528] ? __fget_files+0x267/0x480 [ 980.303824] ksys_read+0x122/0x250 [ 980.304083] ? __pfx_ksys_read+0x10/0x10 [ 980.304377] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 980.304745] do_syscall_64+0x3f/0x90 [ 980.305013] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 980.305385] RIP: 0033:0x7f5b71dd269c [ 980.305641] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 980.306831] RSP: 002b:00007f5b6f395170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.307146] loop4: detected capacity change from 0 to 39 [ 980.307330] RAX: ffffffffffffffda RBX: 0000000020ff5000 RCX: 00007f5b71dd269c [ 980.308509] RDX: 000000000000000f RSI: 00007f5b6f3951e0 RDI: 0000000000000004 [ 980.308996] RBP: 00007f5b6f3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 980.309487] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 980.309969] R13: 00007ffd50b5470f R14: 00007f5b6f395300 R15: 0000000000022000 [ 980.310475] 02:02:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xec0, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:57 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3003, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:57 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:02:57 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:57 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30ad, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:02:57 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 48) 02:02:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x33fe0, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:02:58 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 980.474778] kworker/u4:0: attempt to access beyond end of device [ 980.474778] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 980.475658] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 980.508120] loop6: detected capacity change from 0 to 40 [ 980.547875] FAULT_INJECTION: forcing a failure. [ 980.547875] name failslab, interval 1, probability 0, space 0, times 0 [ 980.549348] CPU: 0 PID: 6643 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 980.550365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 980.551406] Call Trace: [ 980.551745] [ 980.552041] dump_stack_lvl+0xc1/0xf0 [ 980.552550] should_fail_ex+0x4b4/0x5b0 [ 980.553081] should_failslab+0x9/0x20 [ 980.553584] kmem_cache_alloc_bulk+0x6b/0x630 [ 980.554176] ? kmem_cache_alloc+0x328/0x390 [ 980.554758] mas_alloc_nodes+0x337/0x890 [ 980.555302] mas_preallocate+0x1bf/0x370 [ 980.555836] __split_vma+0x191/0x770 [ 980.556334] ? __pfx___split_vma+0x10/0x10 [ 980.556915] do_vmi_align_munmap.constprop.0+0x3db/0x12a0 [ 980.557630] ? __pfx_do_vmi_align_munmap.constprop.0+0x10/0x10 [ 980.558381] ? mtree_range_walk+0x5c7/0x910 [ 980.558976] ? mas_walk+0x5c6/0x7c0 [ 980.559481] do_vmi_munmap+0x1e7/0x430 [ 980.559984] move_vma.constprop.0+0x88a/0x1ba0 [ 980.560603] ? __pfx_move_vma.constprop.0+0x10/0x10 [ 980.561259] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 980.562038] ? selinux_mmap_addr+0x2d/0x110 [ 980.562621] ? security_mmap_addr+0x7d/0xa0 [ 980.563204] __do_sys_mremap+0x94e/0x1650 [ 980.563773] ? __pfx___do_sys_mremap+0x10/0x10 [ 980.564385] ? perf_trace_preemptirq_template+0x252/0x420 [ 980.565124] ? fput+0x2f/0x1a0 [ 980.565568] ? __pfx_ksys_write+0x10/0x10 [ 980.566125] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 980.566829] do_syscall_64+0x3f/0x90 [ 980.567327] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 980.567963] RIP: 0033:0x7f950ebfeb19 [ 980.568439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 980.570674] RSP: 002b:00007f950c174188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 980.571624] RAX: ffffffffffffffda RBX: 00007f950ed11f60 RCX: 00007f950ebfeb19 [ 980.572526] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 980.573420] RBP: 00007f950c1741d0 R08: 0000000020ff5000 R09: 0000000000000000 [ 980.574316] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 980.575231] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 980.576148] 02:03:09 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 49) 02:03:09 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30ba, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:03:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xfffffdef, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:03:09 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3003, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x40000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x105000, 0x100) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 991.709748] loop4: detected capacity change from 0 to 39 02:03:09 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3003, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3007, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) [ 991.814204] kworker/u4:1: attempt to access beyond end of device [ 991.814204] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 991.816168] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:03:09 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30bb, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3007, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 50) 02:03:09 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300b, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x39, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:03:09 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0xa2000) getdents(r1, &(0x7f00000000c0)=""/41, 0x29) 02:03:09 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300c, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 51) 02:03:09 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 991.966495] loop4: detected capacity change from 0 to 39 02:03:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x71, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 992.023106] loop6: detected capacity change from 0 to 40 02:03:09 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30bc, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300b, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 52) 02:03:09 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30c6, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:09 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300b, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 992.102600] kworker/u4:4: attempt to access beyond end of device [ 992.102600] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 992.104225] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:03:20 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 53) 02:03:20 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30bd, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:20 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300c, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:03:20 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30c7, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:20 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300c, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x803fffc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) getresgid(&(0x7f0000000300)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0x0, r2}}, './file1\x00'}) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r3, &(0x7f0000000340)=""/162, 0xa2) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000780)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000580)=0xe8) open(&(0x7f0000000680)='./file1\x00', 0x101001, 0x80) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x5, 0x4, &(0x7f0000000500)=[{&(0x7f0000000180)="7e58430420ef426310ec28305178f808127c6708b018c83e23d0380932ab1276d7597ca7960a0684506a63c05355819cb94b0034c031f0a326628ccf45", 0x3d, 0xffffffffffffff81}, {&(0x7f00000001c0)="ffa67515135288a6a39aca780ba66709a2af27402bd4", 0x16, 0x2}, {&(0x7f0000000200)="69914bc204cf584df3cedb9b6678d2531a543bd7ab231030ac25078f33e9a5dad785045379823ddc0ee52902881d11e8292df431198265c3bd94dc71b709fdc62a3312326f386526c02914297899a1fbe860201ff0356e55cb5a2c071f7c29808898f097c453d3c3278360e4fb6e0a2094a1a637feb5e437bb8f32ab5191db179723675080b0e0d7f21441dea87f68e6b700bfbc409c60e4500e91e7a54d3f28b721b03155109269566ebd83548da337a8f6b3db5dc48224af019fa5f21b8b5d70296bff647abf2594a9d5", 0xcb, 0x6}, {&(0x7f0000000400)="70a475c4fb4d33eb95a725b048c19f482b380d05c58a90b33f6bfda7a0b77268766c2ac4058f5507dbe56307e200f81ea9d29c5c9064b21f8c44f810eb09d7a988f7e863641872cbb3a823b2cc8083fb43a6e6b7e15fd545f0b66b1fa364c23656fa4be3aa2f885597fcc7c45f7dc54e225455d9fcde2b833a88da74928093fbf1b385219384af44872925707ef199532406978a04171106f94fac3bb62be32c8050f98676e2ca596861661e65471fcdb90a9326d135b991037fd3055f8221dee29ad93116db9a", 0xc7, 0x4}], 0x2200491, &(0x7f0000000880)=ANY=[@ANYBLOB="fe082bc93daa642294791515487269880addcd51c0917ce71e4905d057832a573c0141f14d13cb9bad72e234fc790d2a98b3b57029603e04000000a39748494a440e64a9c5b614405a8c40ffb5820b6348fed6fb79ddc0dba11c4b714c2fefc6525c0855cee6f1ef9faf600949a6dd2df7cfcd474cf322b451f5dfd3f0490f4390b16c971e4270cd1eae40ccdf97eb09cffc4cf1934c6935bf8bf6f93b2a432ba70855ddc11edc08131704185055dd", @ANYRESHEX=r5, @ANYBLOB="2c6e725f696e6f6465733d8f396731673932652d2c687567653d6164766973652c687567653d6164766973652c73697a653d6778362c6f626a5f747970653d76666174002c00"]) 02:03:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) [ 1003.292018] loop6: detected capacity change from 0 to 40 [ 1003.295119] loop4: detected capacity change from 0 to 39 02:03:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 1003.364570] kworker/u4:1: attempt to access beyond end of device [ 1003.364570] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1003.365395] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:03:20 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30c8, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:20 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r1, &(0x7f00000000c0), 0x0, 0x803fffc) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x200, 0x11d) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) getsockname(r2, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) 02:03:20 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30c8, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1003.428510] loop4: detected capacity change from 0 to 39 [ 1003.433393] syz-executor.6: attempt to access beyond end of device [ 1003.433393] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1003.435911] FAT-fs (loop6): unable to read boot sector 02:03:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1003.447879] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value 02:03:21 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30a7, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:21 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x306f, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1003.497476] kworker/u4:0: attempt to access beyond end of device [ 1003.497476] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1003.499129] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:03:33 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:33 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30e0, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:33 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) r1 = open(&(0x7f00000000c0)='./file2\x00', 0x50500, 0x135) openat(r1, &(0x7f0000000140)='./file1\x00', 0x24200, 0x80) creat(&(0x7f0000000040)='./file1\x00', 0x14) 02:03:33 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:03:33 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:03:33 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 54) 02:03:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1016.079734] loop6: detected capacity change from 0 to 40 [ 1016.095530] loop4: detected capacity change from 0 to 39 [ 1016.164336] kworker/u4:4: attempt to access beyond end of device [ 1016.164336] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1016.165794] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:03:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:03:44 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30e1, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:44 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:44 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 55) 02:03:44 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:44 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:03:44 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000040)='./file2\x00', 0x0, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r1, &(0x7f00000000c0), 0x0, 0x803fffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r2, &(0x7f00000000c0), 0x0, 0x803fffc) getdents64(r2, &(0x7f0000000340)=""/162, 0xa2) [ 1027.006945] loop4: detected capacity change from 0 to 39 02:03:44 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x40000000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x6, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1027.026434] loop6: detected capacity change from 0 to 40 [ 1027.073152] kworker/u4:4: attempt to access beyond end of device [ 1027.073152] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1027.074691] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:03:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:03:44 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30e2, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:44 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 56) 02:03:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x7, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1027.166187] loop4: detected capacity change from 0 to 39 [ 1027.257298] kworker/u4:4: attempt to access beyond end of device [ 1027.257298] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1027.260110] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:03:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:03:56 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:56 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 57) 02:03:56 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000040)="88ca93bf04", 0x5) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:03:56 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x40000000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:56 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x40000000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x8, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:03:56 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30e3, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1038.478193] loop6: detected capacity change from 0 to 40 02:03:56 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x400100) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file2', [{0x20, ',#('}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}], 0xa, "a77ef368d4b0eda0a2f6cf16a30f309a1282bc04e0b59f7b3a105662d860ac807abf1dc2ec86c7e6ffdbb541f83e200c1496592bd1873df3bb595ff711c73c191bd4d00c2ae3c63e7f66bafd6a90fa77e170678793c0f35f56379275b135f47aa6277860976a74d91279450cf1ff24f87e33fc9847e1ac75b6bdf291c2e9dc06c6b929d4a6aeceab9dd4152639e30aa6819a32dcc6c7a3d42baf32f2ec0bafc131dbfe76ed4dba4c3e9b68976c5a2423e967ba600eefed2012"}, 0xda) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:03:56 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1038.536649] loop4: detected capacity change from 0 to 39 [ 1038.568759] loop6: detected capacity change from 0 to 40 02:03:56 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:56 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:03:56 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 1038.635945] kworker/u4:4: attempt to access beyond end of device [ 1038.635945] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1038.637728] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:03:56 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 58) 02:03:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x9, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1038.671692] loop6: detected capacity change from 0 to 40 02:03:56 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:56 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:56 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:56 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 59) 02:03:56 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0xe019, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000140)="7c8073ce0e09ebe5fed3f67594b074a598f2ca9f195ba014edb2b74b017524d004598fbc7eb392e88c3a877a230dea5e92f9b3cd230359d4d513a85cd7f8ca6f45ceaff824885f8bea56a06d2422eb8807607bc9df7697eda74c43e43017443258f023e8f9406a404d5128b4b4aa6fc6ff5cbc1c2563d35e9b3594238b25f86f2f8f310ede0dc7e520395e705477fbfaf37da0f90f561d51ec3ebd4069b2138be02cc85560b9ac41420756a90cfea4af53d319260aed", 0xb6}, {&(0x7f0000000200)="033d965e905e7d5dafa17f6001df176855be2c298219acc41be1f350f03efe1e76686bbb50521f9f0def439ade36a15db0cfa8e47b985271f951e1f6b9b1c9e12c8c076f7b8085a0f9ee65be0161d56303f46e4266981396ce531f8bbbd88d0cd5ffd7c364b3d32225349fb27ef00a64aceb15066305f19111a345e2066d8ce19a4b339ca99c39a7690570252a19dcd8800fc009bf4e8761bf376bd1608be70f714fed5f577f206ed50db3", 0xab, 0x7f}, {0xfffffffffffffffc}, {&(0x7f00000002c0)="676cfd85c1d4528d3ddb23d723ce63581317048a13b8b9628ee568a153bffdd99ae086e9b50e666ecd8f1a3f1b481d75e5bcf03c01f9f43755e38647f17c961d49cd10d2e0a5527dfe70ed3c302747d002076e16a2e972a611c20dc25069695f63b13bff5605b50f0b6bc5eab1181e3f04dcb8ab9f0c0d63887d313a", 0x7c, 0x100}, {&(0x7f0000000400)="c22de494ce71ea9c89979f5aca0b3778506a", 0x12, 0xfffffffeffffffff}, {&(0x7f0000000440)="774623b12e19d0bba83c26d0ac750e21b3494df213673e925e64c4cb1363936e503f38e2db656c6e56ae11ff0217825e5999dd94901e7607ae8a7bded5b8d43baf90a72d935400838f17c93a6c60932ee06510ff8ca864198d79b220355b88c5ff614f622ced25ff072a30d9d9de6c", 0x6f, 0x7}], 0x1944018, &(0x7f0000000580)={[{@nolazytime}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x6}}, {@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x7}}, {@nolazytime}, {@dioread_lock}], [{@measure}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x80000001}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}]}) openat(r1, &(0x7f00000006c0)='./file1\x00', 0x1ab000, 0x44) [ 1038.784517] loop4: detected capacity change from 0 to 39 [ 1038.809778] loop6: detected capacity change from 0 to 40 02:03:56 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:03:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xf, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1038.926869] kworker/u4:4: attempt to access beyond end of device [ 1038.926869] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1038.927729] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:04:09 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:09 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xdc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:09 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:09 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)={'L+', 0x3f}, 0x16, 0x0) getdents64(r0, &(0x7f0000000340)=""/158, 0x9e) 02:04:09 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:04:09 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) (fail_nth: 60) [ 1051.980601] loop6: detected capacity change from 0 to 40 02:04:09 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4004, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1052.036172] loop4: detected capacity change from 0 to 39 [ 1052.057438] FAULT_INJECTION: forcing a failure. [ 1052.057438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.058915] CPU: 1 PID: 6897 Comm: syz-executor.1 Not tainted 6.5.0-rc2-next-20230721 #1 [ 1052.059923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1052.060932] Call Trace: [ 1052.061265] [ 1052.061564] dump_stack_lvl+0xc1/0xf0 [ 1052.062069] should_fail_ex+0x4b4/0x5b0 [ 1052.062596] _copy_from_user+0x30/0xf0 [ 1052.063107] kstrtouint_from_user+0xb0/0x170 [ 1052.063710] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1052.064354] ? lock_acquire+0x19a/0x4c0 [ 1052.064868] ? ksys_write+0x122/0x250 [ 1052.065383] proc_fail_nth_write+0x7d/0x270 [ 1052.065941] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1052.066577] ? lock_is_held_type+0x9f/0x120 [ 1052.067138] vfs_write+0x2b9/0xda0 [ 1052.067620] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1052.068256] ? __pfx_vfs_write+0x10/0x10 [ 1052.068793] ? __fget_files+0x267/0x480 [ 1052.069344] ksys_write+0x122/0x250 [ 1052.069814] ? __pfx_ksys_write+0x10/0x10 [ 1052.070350] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1052.071019] do_syscall_64+0x3f/0x90 [ 1052.071535] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1052.072186] RIP: 0033:0x7f950ebb15ff [ 1052.072658] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1052.074860] RSP: 002b:00007f950c174170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1052.075813] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f950ebb15ff [ 1052.076696] RDX: 0000000000000001 RSI: 00007f950c1741e0 RDI: 0000000000000004 [ 1052.077570] RBP: 00007f950c1741d0 R08: 0000000000000000 R09: 0000000000000000 [ 1052.078446] R10: 0000000000000003 R11: 0000000000000293 R12: 0000000000000002 [ 1052.079318] R13: 00007ffe1a3e52ef R14: 00007f950c174300 R15: 0000000000022000 [ 1052.080222] 02:04:09 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000040)='./file0\x00', 0x244d00, 0x148) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0xa5) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x40480, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r2, &(0x7f00000000c0), 0x0, 0x803fffc) statx(r0, &(0x7f0000000180)='./file0\x00', 0x4000, 0x100, &(0x7f00000001c0)) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) close(r1) [ 1052.122512] loop6: detected capacity change from 0 to 40 02:04:09 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x40000000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:09 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) getdents64(0xffffffffffffff9c, &(0x7f0000000180)=""/116, 0x74) 02:04:09 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1052.212692] loop6: detected capacity change from 0 to 40 02:04:22 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:22 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:22 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:22 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400b, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:22 executing program 6: chdir(&(0x7f0000000140)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/162, 0xa2) 02:04:22 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4004, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 1065.496401] loop4: detected capacity change from 0 to 39 02:04:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x500, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:34 executing program 6: r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6e, 0x8}}, './file1\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) fsmount(r2, 0x1, 0x8c) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/162, 0xa2) 02:04:34 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4007, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:34 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4004, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:04:34 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:34 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:34 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400c, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1077.312161] loop4: detected capacity change from 0 to 39 02:04:34 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x406f, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:34 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4007, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:04:34 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400b, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1077.445934] loop4: detected capacity change from 0 to 39 02:04:35 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:35 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400b, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x600, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:35 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3003, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:35 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7fffdf00a000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:35 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x202000, 0x108) 02:04:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 1077.551905] loop6: detected capacity change from 0 to 40 [ 1077.591826] loop4: detected capacity change from 0 to 39 02:04:35 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:35 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400c, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x700, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:35 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x4e1a, 0x5, &(0x7f0000001500)=[{&(0x7f0000000400)="e354c07e02d659d0b179cb5a7087374af10820da3c200f8b2bba3c4a490d29a316085213d2347cd3d875ad1ecc2da4f52f1430513d604481d6c170b4248078f8c0c66344b435d1a625f410113826e635532b97617a146cc2a83688f7701845eab068100c396e86fb73b1945f07f8387488a64ba4555cba78a233cbf9e45e6088410d86eca6530acbff1ee73f3ecc589029448eda4703dc44b74d74fee3bfb58cd85ccee38a1c91cdcd1ef0b0e7743ee9be29d7986d64c046caee16f701595d8acf70176f0173644efddac042e971124f0a5adf9eb20ee98e2927ea61bf069c79eb97a11720c7f45e644f84a667ea57ed6951234b0d985f0515921343493bdf489c172397b963d3acaec2178baa9d95073c1f0f675cfe728c2c460c182a581c16d5a97cdbec39e3db5cc10431c41b19d15835b2bf582572e2d6f20de6040676fdb13f6b6ff7fffdd21903e35847f99d280ecb6812cb6cc42177a4ce13940727073775300f5d43be5af932062197a775f8fd523ea2624fe9aa3ca10efe138a5f00420c4f3bd782ac78490035c97a447d68eda24befe5152afb467c52614ff3e898a98dde064ef26a225ee3151d5a51a34eb5fec2025b64c8be9076981bc430fe0f420e580c0c443567584a276fbecaf1741060153c0252de87d6f911f5fafad2a58b4c1c69b161b87480d355fe29baa23a44b5adeb374ac701bf3915a6a2970ee9cdb6d179d6efe9e0caec3e6cc3981dde580cf00df308fe82ccdd478ea050cdb9ccf9c615861dd9f737bd7ebfc6b4d3421b682771188ba0036640cfe3c54d1b16bef394172c1c5b9d8793b5de988b0528c2598a86e38b1ee5521dc87508fd17807dce4a6ae8253d769a42fe3e9acb51180f58506d306dcfe914367d502fc14b8c004f6610d7de23c120e9bfdb2bb77f8f14735e8d9c1c038239b9b4594af23c3d2f51e70024b6bc4ff0578d8b8835283bc441ee581bbbb41359e6da8635a03c54b6c60afb71e2603c7024d69f13fca487b58db2ad68c7bdd79b23440cce1e523281964dbc8f0c1edda6bd3850c1528afce91926646c8ea570c1f5d239bedf467b9613993807c818951fafe9fd1ae080cd12a54e3edd9636b4cee1e440c62023ed4f707cf1805856fc5c8c203000b3a0d713ac9778246fac021e221e3ec5632ebfdabc8048390dea0453ebe637ce1d3a8468e23ea2af8c2271309ad7ff1978d4a23fe6f043eab638cca869a972139e0553a08c36a7685bb169bca75b2997b6e226c28c333ca714482bab1967426b4892a3c1b20fbe3649c1fab42dd0c3e2a2b531ce7fe3558d99ee1d861c12fc53e71b4a099763b36ce9d833f3be6a2292af3c60b1f4514c9cd915ae466008722eab983aa7f4696d4b5b8c9cdd7f23e92973fde79405c98a2f153f06d8d0edbe504b863fd5cc8632d2ba086559f91f8844a9ea3489c81f7557d7b00454d7122d8b612dfb795816f49cd087a80bb8cbae2d19efc2db6ab25b8213fe8efef550a20bb795334e64ad7e445fe02df56e811a2bd3582b23301649d9dce42cd6742048f8689d727587a8b792000ea93e689188cedc06083a395b1591996cec5d6e079a9737562caf30f3e44ce93804aaeff749c3e058d24d66a2bcc44153e8273b6621de6bf8fd8fe9fd4cc74717af6b7afd2d8f865f519656c93cdb92e7488e6a0b684fe7ca788a5906c6e1ab7e413b4f911bfa6a68991954014cd8aa5f7276f2fd04eee3c74cb8016181b96bc32ae4c4b03733793799890d05414b6e1dac869d5a4ea1a902115af39265a7339779bf8d2a37b08d89b590bccdaae98e0af8bce784a7be6ce5af7578203a310beb09ea2f5e48cdc7b5e3c2845488d6fd0cf8cde157dfaad2a1a5508e181a223feb99b243021ec05de916ca9c213c8b623d86eb2ebf436db5cf41444a9583d87f4da622a9adde283ee334860ebfb080aa952e592766ac694faa19ad897839acc84e3acd42afcdbbbb24a69d2b21743ca3e59591ca20f8fc64b86b7ee5dec62c7144720a46792c840c2ad3ba0f313659b14c6b9a52b2cb4ac90ac834d5f879c8fd0317e2656925e1238a0a5e7b9cf07d1a7827aae5c1a5baffbe09264ffb6aa889131c19d11b94bbd1098ad9ec3d089602976e444c061b80c61cf94c99cb3b8b0d68d1d956603cf156dad1903e4920ff95511e95d28a7e1fccd8934df46f3994c1c2feb727091657fbcc96a3c6c4bd1447ba3169f2a18cf466025cd82cf19fe36399ea77f0cb8152a7b936aa191948306246c36a9f01536a479dbee350cef3f794c7967f0ab603ed58e9590964bfec5a8883a17e34d63940553a5d8c9d035c800853a0e624d593c5581186845fe4fa4daa574d301ee4ba8450ee730a4aaa66d31cd0db0412e54bcb5590db9c942fb8a3109d1be62b8f7295227ea05a62c7c337685b8ad32bdb80a850d2450190ea8a1334ea6186e9ff015c3750393a515fe9d9b61f2316a22e858512d10c6fc80cc0acfb723a5880f3f900b4ce9973d638054faeb102e9417995a2e017b34f16d5a7ce7255f63be4bfb023bbcf652a97052bcc7dd68c6d27ed84e88865f1e74e4048e4f43438f0b42cf8fa1f47859805487e29d7729ef61a2ad5062c008b6add6d3d0d000f2087d23f6c2b55b914293d7ec07cc7db065194d7b2e0f3fd2e7bb0fbb881018d847e04b27570d3075fd12a9ff1f846926ed1dc7da400f639fde1e025da598d0121823e03806667fd62149d7a073a38430990323da4186e67b80f2c8736c910a3bb09c45652019a97d42631170737f1b7c0c4940ab7b0795605ae1a12486ecc96b5b13ad744cf526a80ce79ca9652626fb8a336b7babc81dded645cc69b8cbe4cb0ee379a2bea3d7e50f14e8f3831f06d7d80d1ad78052a8789a9a40d92b79b194b559b0cc35faca84c88478f9ea5d18a385ba50aa0d3aec62de0c787824545a581712fcca783a7918b41e3b8e8d1f7104e0a0c48e7c904a92171d50dde81c046b6eafc35ab9b22254c253519f84a76d2e976e80e30c306264a52735d7d56cde570d8db12f77eb8864a22ebea907943ff44ab881a09703d6aaa2696e8b338b277fc617269710b02521129d280093ef37779124dc056281f9da87b2ee5ab6980fcada99185a7ecb62d4b09dd1f7eca90a723c6c0c844aaebf3a139e61d728fbb9335f49bcd4a0debd6e3a2b2769350c26d7dda87ce9d9de1d8eedfb3741741a9af9fd787f03b0baaf4e8370fc299b85c9950c3d38265817a191ae520073249cf0b54a80f43429a84cae1ec706845fb1326ed77301cb41431f2aadc73d1a3d38f3311225ba666d824e7017e40b061396568bc24a0b452ba55b301544ea364e4443269cefd06489b989d1cf8aadb5d8c32c330f86492d88cb3d67462fbdde76ba06d0dce359832ec926b50e1589e29fb2c5a5398c55ffb80e4aa6e996333ce84ae7ceff8d7801528b7c202af6f14118baa516e168c47709d0b8ebcef960f8d094d13ff4b51baebabe134c7e5faef617244874d428144659be9e4a8fc0596a07f5815252778353817b24ac5cbd8d716b821296412723fce4046e8b8c3c88dcf2052e3efbcde0734049a43ed8b5abbaf4f85b33fd1142c09aa72630315bf458baa5c18a3151a268300184f404cfd273f24018fd0e9b2c7f4bcf08a79fcfeb9d71192c8d7274e74ec077fb1c123a60a24054247d647d91663e8b6114c5d45dc3d20851556f3becc9f8f38a5a550e387d55551c1b33a7c750b73232146c1053d92f9a67e18cb0528f18534ff5fbcf29982b9f5d8c9b3d8d56ce0b3bf4c1869dae46ea0aecb82646de3a2116feb51524b05c695fc86fc41bf4919d1d834d8bd4e95d2d1613b6b4c37e393c257b4f2088f5a04db3789e75a827ef1d22b873a4377452f58b55f295479c31e21340694e69510e47f9cc1ad4282a576815c715bb48c0fc8301e8ad77be34ad19358118a44d1cbc398cbf53d7c343053a143bf1c7105252f4b325cd157bc19bfd7bd6de1343d101c517fde64dd5ed16ff4b988266a6fb7fab736846bb6fdd4df92d32c2c72910a997e10a25ff5eb11cedf6e917498bd4bceb5e11f5e3815210edd9e495b20de9499b9d6d92a75244d19a9538ac55716d1a461a669c37ebe0f903e050db7294a38a51f93f548e8ba3d2377dedcd28e956c11ec07fa24593fad90c7b43e8cc8ca1449d75cd26c37b627385613c43af5b62f49f9fecb83028a5be1b7eed1deb31adac8950159a0fd24c4966937b9afd0f0fafa71e905be808c6f105d220ddfd86d737289ac4d258950f9a7c88fcd69c7b519be606e95992d57aa5d38840ce070c517ba199e34161fec8056605048a89ad2db19d6971747f867e011876929b90bd37869b79975de16bd5703a380b97278d5bd683277a65799167683bab98561fd8028d9241c48f6aa853e1bc74a97f4b942b25c7c6ecc806629f0ac11cdfaec30470dd081f5b3338b41bf9471e1b408a1ac89f0b25debf351f9256668e99f87ed963ad234318f1c8a737a001ab8010c70015ccb6ef7ba43bdd4c1bcd5380283ddb29baf59c34ed43abd2863a21312836805ea995f2d509138d64660defb63a7c1ca0c810aac3947f90efe7e02feafd61c46148046adcd5fc8efa9f896c8f4ab4952a9f0d33a9dde94ed6c23d0a93a76babcdc1421552eb2926cf20b17b4e01fb5cd7caebae76bd65877717c366d5cc92e0697e91b5509804e027f43ad14435037f5d6b7515f7f71ca7659b23d0ea36c315102d11f16c2ca57d9db7937aa14a00788b93c05f325e8d93f8cf8e02b1539ed0d4858f7aff3c4daf556d274d9d5dbc685054a2872ab48b5967d91efd1e96bf155775903dec60af0a4019751dec3e846b1c9db6f90c1c85222691a1ff10f09f7a491f209b99d461a5f530dd447e4739e7a9adbdb1056af2fcfa3a12b66ad9a4029815090782186ea5ccb0502ec6f3262fd9fa46f3858c6b686efefb369c1babe926f6d277470b806099e3c8310b5d92155ec33143cf6b619061220d7729b8341b66496f7ce5ff61d417e34d70f360341ce05b371f3c16569baa5491edbeed5d6e51675ac866b6d61b358286a074c10e409cf2dea74f607a41299e87b67c4134032ef48a1561efffd3a86b6d54bee7cdaa4c48c7d6d3b4b1a5180a3080514dc5620461aab9a8c533f849dc57cec0b86ff04c762f72cc512b05b4cb722bc8170aea19fdce13fb9a4b095a805fb198af53f6abf2ef278bcddc747a7a5170b513bbd031afb5216e75bdec8a623d4a5520d891f7eb50e52af47cb587b1b586b3c9eb650d71749a791bdd91f7bb46e2552dde14efa024544acacc8a9f03ce6b6f510dfebee51015b2ca9bfdbec58d953f0ae51f864a39fb790fb2b8109b9f4841c26da7e205a2bce80b48bdbc2e759daf57936dc65bd5945a29ab446a52048ea929f092b6765e1c184fa3bb01a83448182afa0e3662122e6cd647b5f325b261ade6856f88a15dbb8d3bef64e0b2fb170120d65ea22c3833e35b3ec6a5d57600fc1a838b6b8e5e1ac20ceb80d5c9857e925caa9d2cf01021670e5cab000d332d9b6398c97ede2b700ac14142f9ef9cb660cb9658458f03c60b0831a0948e6139e85bb46413cde44b54314b6a3c1df4f2bab58c3773f1fef77fec19b6ac0864ee9de3f1bd27875640116893d222aeff42e470224bb9aff89f5ef465356b16b865891443358a7fde10c4e9c50c940421ba99e3cc2a8c65ee2c3237ecb28f50c49e95ce853e2eb6d5d3cfdaa5a7e8edd00d9f8baa17459fb6b817eaf832e7ced4e0674", 0x1000, 0x1000}, {&(0x7f0000000180)="f67f4ba70db81df59da8d0d79e3a873b812ba0ceec063c40420f518e95939ed36d1a9cb56cdcf300bd432c9e52d26eedc4086fe3a24cf354c4ca801a91e23553f46b9f3566971302773e6a2ad8a31189895d567b7346bffcafc0487b886d83d29923d96bdb7ee99a435bc4d857ad075126ad181a618f794deb55cdf9475a60aebda0c01d31021a60600acdba", 0x8c, 0x20}, {&(0x7f0000000240)="c9e4640701780a92eab97bcb3e4538303d72596fde43e3346fa12a13c7e489d94dab769ef5a3c3977c3e42999fdcfc5bac84104dd0aff2869a769ee916e4f86e574d6de55c3f", 0x46, 0xfff}, {&(0x7f00000002c0)="4cc9b19bf6e608d297f9bf0d84c903d69ae7493d77ae0b798ca3a2fd3e57cfffe3eb13a1e355859cba713ae3279536e7bc325e03c8fce18bf9d232cae347166d837921ddb58d39a7b3f046268eca5477d3903a8903cd7edd9e576dd286fac887f0c8bd98c629302988d960347de9999a8c", 0x71, 0x94}, {&(0x7f0000001400)="5d9d4d39a4e09bfdf6f65fdf16e16b6255d2fe31cb7eff85bae64093cd71a0902b6cfea032ddc98b749ddf380e1850377c0d4d181bf8212df3aa531618f0af666c4eb96ac1d09eb30a2fb1d4470c94002a6195ef450c62162993fc7631c6ec704e3e28f78383a5b3b82f047afcb3d4ddefc6b3a924e36f4b0acb9412ecd1cb4fbab3a0b9a5d7be83f9c5a8d47ffb9391738aba6d08f89ab390da12b98048fcfbd696c2ec2dc58e15913f9b6aa5781598924392ae806a6944a4e616ae2c9a9b7e8980785e7729d8dcfd3f8ba5a8eadb955649af700c79cc627ec5086f2415102d44d1e949e354d46a3244a5", 0xeb, 0x2ddc0}], 0x200000, &(0x7f0000002d00)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x31, 0x31, 0x12, 0x32, 0x33, 0x37, 0x33]}}, {@size={'size', 0x3d, [0x74, 0x34, 0x67, 0x38, 0x70, 0x6b, 0x34, 0x74, 0x35]}}], [{@fowner_gt}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}) r1 = syz_mount_image$nfs(&(0x7f0000001640), &(0x7f0000001680)='./file2\x00', 0x3, 0xa, &(0x7f0000002c00)=[{&(0x7f00000016c0)="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", 0x1000, 0x9ea}, {&(0x7f00000026c0)="1cc1fb157b148693d17c91c1acca183d57a55a2ff7c3ceff34f4d0b592e19b83dc7f06160ae66b4321c7282b039c2e6897c79fc74b54acb1b1866fa60712a2c318a92835da59b4b30491347c96500a6445c880e46201244b06bf788fc737c1882908505e69ab775fab6b871208252961b7dff81ee928dbdb53ea9a5c4a5bf47fa799aaedebdb96eb483d1923dfbd860662c67d851a027cd29fd3a6adc6bab13d678d719cc220b61e38ff26195ef4142e50f48fe6a7e1fdcfb0ad72766132ef329271f3a6c0efe1676adb5cdb2d03b768d4d791", 0xd3, 0x8}, {&(0x7f00000027c0)="d3c206030d98142aac523deac9524ca9e56fabfdf02f36e1ada2ffc23d590e89b44b7e8b44e96c4047b72ef123f7b2b1c14dcd9bdef51e7d4e5754a3fb99b68dae22acf72b7a914fc7b8bf1cb434dbaf0aef1efb3267fffc82e1ad22fbb442b9f7b476c00d7c70a0fc19f1c8b00ec1268b18c39d03f94f3b4a23b6b0b6d13ea8062dafefbe90ef0bef06d1095fa1840060d157129e26484afcf9a03e289a548ab6249bbc5d64d5778402baece21075743dcbcb68be376c2267eb244b2370", 0xbe}, {&(0x7f0000002880)="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", 0xfa, 0x4}, {&(0x7f0000002980)="e095574244d9ff2702df35987b01234033eb47602900771345c9e994857908d506660b02b426df51000b2028c44de080fa19d0a598d7fbd3ae4fcc4b17681ed804fa9d66b49468da7de79f53f2217af1fd512466365fb4bb70969decf1cad9016ef267a1d29482b04d23853e6f7e459ccba47ba01eac81ab7fa9b4f625bc37523d359bfb1beff69ef93febf976a31b2e39475a920927716ad10c87e853bbac56db9b8f60ccb77e0624a67a6a46f364ff4e92eac94830b8b774674834a6b2da5667634585e846a0a51d3b188f411cbc8f9d09a2a66933d6", 0xd7, 0x3}, {&(0x7f0000002a80)="42bf64fc02fa037fd5e4439f44d4ede65a957729300e2adbc0c30359312c7acd469695", 0x23, 0x1f}, {&(0x7f0000002ac0)="fddee3e1677b122bb80ef2faaa3dd0080ce5883991134b22f2196989a1fb14a59b40", 0x22}, {&(0x7f0000002b00)="ac40dcc133dcb72fbbe521b2b5f87f1c8a927be87047eb1b97b3d69f8bfa6be5c1b1d805139380139612ed8be554fb79009244e605153de4546c9ec7eeae07fa1620792a05be6dc1a9bd3899654e871377c09e70351a8065289556288802b8", 0x5f, 0x3}, {&(0x7f0000002b80)="6d74856d06d9efcd857c3d7425c4615af743a083ed9c2d22b94d", 0x1a, 0x7}, {&(0x7f0000002bc0)="21e48092", 0x4, 0x100000004}], 0x2000, &(0x7f0000002f40)=ANY=[@ANYBLOB=',tmpfs\x00,subj_role,-,,seclabel,uid<', @ANYRESDEC=0xee00, @ANYBLOB="2c736d61636b6673726f6f6973655f747970653d696d617369672c7063723d30303030303030303030303030303030303031352c00186257463e54c472b4d0be66fdb29c54b75bd5e5f7ba9cc1c4f6474c279d2eb1f2326632c2ddc8ccbf1b87391db90845abef230ab5511f128b16bb689ff01e6e9b100ab55a126cf05755d447d86902cf56a1043644d9943f5669f5137201c4180d7d14145f8226eb5cfd593dc61e43c379a86eb82a6251087efd59f7aa9f2b6f5ac0ac7abb004113cb7cc726b31c945df65ef5fbef2d2868a7"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r2, &(0x7f00000000c0), 0x0, 0x803fffc) r3 = syz_open_dev$loop(&(0x7f0000002dc0), 0x80, 0x800) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) openat(r0, &(0x7f0000002f00)='./file0/file0\x00', 0x501402, 0x4) r5 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000002e00)={{0x1, 0x1, 0x18, r3, {r4, r5}}, './file0\x00'}) symlinkat(&(0x7f0000001600)='./file0\x00', r1, &(0x7f0000002d80)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r6, &(0x7f00000000c0), 0x0, 0x803fffc) getsockname$unix(r6, &(0x7f0000002e40), &(0x7f0000002ec0)=0x6e) 02:04:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 1077.712179] loop6: detected capacity change from 0 to 40 [ 1077.717830] loop4: detected capacity change from 0 to 39 02:04:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x900, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) 02:04:45 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:45 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4004, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:45 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40c6, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:45 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xed, 0x7, &(0x7f0000003400)=[{&(0x7f0000000180)="c123ee77db36e246e689180c5f", 0xd, 0x5}, {&(0x7f00000001c0)="ab67fa9fb1a11631d3fb7241f1d913749c5d72a1f265e7afd4e3ca0d11ca7e24780715d6ff24a4c635abea3303e2", 0x2e, 0x8}, {&(0x7f0000000400)="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", 0x1000, 0x5}, {&(0x7f0000000200)="abe2b29278ff1236360d5cd58b720c8e1ab96e0df984b81fdbf00effe6b18707ea89adf414cb30cde410dd6265c5268087e9d8381d1e2d3d3338d5ba4b0f", 0x3e, 0x5}, {&(0x7f0000001400)="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", 0x1000, 0x77600000000}, {&(0x7f0000002400)="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", 0x1000, 0x7fff}, {&(0x7f0000000240)="5167e1bbbbbe0e1ea9545d40b472502a892225807b589434def6bfc98cb79dbfbe9f550171d145ddf92654b4ea520318f9d524243b2163d5c63f6b666c4112c2f65ef95041bcd5ef8ee19f146534b3a900797a627ec2e3ebb7501b0bce4ed28678b610b515952fe25cd8b042e38a55d3728ca9e2f0ca", 0x76, 0x1}], 0x20a6000, &(0x7f00000034c0)=ANY=[@ANYBLOB='vfat\x00,4#*,^,\',vfat\x00,fscontext=sysadm_u,measure,rootcontext=root,smackfshat=vfat\x00,fsname=^,audit,euid>', @ANYRESDEC=r1, @ANYBLOB="24083cc3768b373c270eb84a117e476534cb7657f92421fee580fd04a2c952154ebc607afdde38da264723bbd04ce2fe32a240d1d6177de72d8959bb7b6ad8c852aca6ac129054749c0100d0d776dcecc1177617c674ca6efabadf4b2a2611e3ab7315b118dd834f53bcaa1d7cc44599e9f781a50cae00b6801478af1f7e10e050fbe0d5b65bcfed10f63a66beaa5769ab1b713eaa8e1b59c5c28324317ac08c94f5052b9492fa00"/178]) getdents64(r0, &(0x7f0000000340)=""/145, 0xa6) 02:04:45 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400c, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1088.401740] loop4: detected capacity change from 0 to 39 [ 1088.403095] loop6: detected capacity change from 0 to 40 02:04:46 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v1={0x1000000, [{0x8, 0x8e}]}, 0xc, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:04:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) 02:04:46 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300b, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1088.510580] loop6: detected capacity change from 0 to 40 02:04:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:46 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40c7, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1088.541102] loop4: detected capacity change from 0 to 39 02:04:57 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ff5000/0x4000)=nil) 02:04:57 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40c8, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:57 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4007, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) 02:04:57 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000180)='./file1/file0\x00', 0x200000, 0x102) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x100) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x80000, 0x49) 02:04:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x2000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:57 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x300c, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:57 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40ad, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1100.126948] loop4: detected capacity change from 0 to 39 [ 1100.152139] loop6: detected capacity change from 0 to 40 02:04:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xdc00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:04:57 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40ba, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x0) [ 1100.259203] loop4: detected capacity change from 0 to 39 02:04:57 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3086, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:57 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ff5000/0x4000)=nil) 02:04:57 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400b, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:04:57 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7fffdf00a000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40bb, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400c, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3087, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x0) 02:05:10 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x8, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x100000, 0x4) 02:05:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:05:10 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ff5000/0x4000)=nil) [ 1112.751609] loop4: detected capacity change from 0 to 39 [ 1112.758817] loop6: detected capacity change from 0 to 40 02:05:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:05:10 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40bc, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:05:10 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30a9, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40a7, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x0) 02:05:10 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x8, &(0x7f0000ff5000/0x4000)=nil) 02:05:10 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40bd, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1112.993382] loop6: detected capacity change from 0 to 40 [ 1113.044156] loop4: detected capacity change from 0 to 39 02:05:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x34000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:05:22 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40c8, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:22 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) 02:05:22 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xa, &(0x7f0000ff5000/0x4000)=nil) 02:05:22 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30aa, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:22 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40e0, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:22 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) mount_setattr(r1, &(0x7f0000000040)='./file2\x00', 0x800, &(0x7f00000000c0)={0xc, 0x100000, 0x80000, {r1}}, 0x20) 02:05:22 executing program 4: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x40000000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1124.795761] loop6: detected capacity change from 0 to 40 02:05:22 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30ab, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:34 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 02:05:34 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30e9, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:34 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40e1, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:05:34 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7fffdf00a000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:34 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xa, &(0x7f0000ff5000/0x4000)=nil) 02:05:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:05:34 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) [ 1137.456563] loop4: detected capacity change from 0 to 39 [ 1137.478696] loop6: detected capacity change from 0 to 40 02:05:35 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40e2, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1137.510290] syz-executor.4: attempt to access beyond end of device [ 1137.510290] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1137.511777] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:05:35 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) 02:05:35 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:35 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xc, &(0x7f0000ff5000/0x4000)=nil) 02:05:35 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x30ec, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) 02:05:35 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000180)='./file1\x00', 0x40, 0x181) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x4400, 0x100) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) close(r1) 02:05:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x400300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:05:35 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40e3, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1137.738082] loop6: detected capacity change from 0 to 40 [ 1137.743471] loop4: detected capacity change from 0 to 39 02:05:35 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000ff5000/0x4000)=nil) 02:05:35 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xc, &(0x7f0000ff5000/0x4000)=nil) [ 1137.797551] syz-executor.4: attempt to access beyond end of device [ 1137.797551] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1137.799064] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:05:35 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:05:35 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ff5000/0x4000)=nil) 02:05:35 executing program 6: chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/162, 0xa2) 02:05:35 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7fffdf00a000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:46 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) chdir(&(0x7f00000000c0)='./file2\x00') getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:05:46 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:46 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ff5000/0x4000)=nil) 02:05:46 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x10, &(0x7f0000ff5000/0x4000)=nil) 02:05:46 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000ff5000/0x4000)=nil) 02:05:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:05:46 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 1149.250631] loop4: detected capacity change from 0 to 39 [ 1149.264521] syz-executor.4: attempt to access beyond end of device [ 1149.264521] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1149.265372] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:05:46 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ff5000/0x4000)=nil) 02:05:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) [ 1149.311050] loop6: detected capacity change from 0 to 40 [ 1149.356739] loop4: detected capacity change from 0 to 39 02:05:46 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x8, &(0x7f0000ff5000/0x4000)=nil) [ 1149.391462] syz-executor.4: attempt to access beyond end of device [ 1149.391462] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1149.392317] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:05:58 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x80000, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x10, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:05:58 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x10000, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:05:58 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x40000000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) 02:05:58 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ff5000/0x4000)=nil) [ 1160.902570] syz-executor.6: attempt to access beyond end of device [ 1160.902570] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1160.910332] FAT-fs (loop6): unable to read boot sector 02:05:58 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1160.938103] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value [ 1160.939894] loop4: detected capacity change from 0 to 39 [ 1160.999594] syz-executor.4: attempt to access beyond end of device [ 1160.999594] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1161.001247] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:05:58 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1, 0x2, &(0x7f0000000000), 0x2021, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:05:58 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x8, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mincore(&(0x7f0000ff7000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/56) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) fcntl$notify(r0, 0x402, 0x80000003) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ff4000/0x4000)=nil) fallocate(r2, 0x0, 0x0, 0x87ffffc) utime(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x10000, 0x1}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x5, 0x5, 0x7, 0x0, 0x0, 0x49044, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x298, 0x6}, 0xe132609e60dd38cb, 0x9, 0x355d075f, 0x7, 0x3ff, 0x8, 0x401, 0x0, 0x10001, 0x0, 0x72}, r1, 0x8, r2, 0x1) 02:05:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:05:58 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xa, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) 02:05:58 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:12 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x0, 0x1ff}) 02:06:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:06:12 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = syz_io_uring_setup(0x22ac, &(0x7f0000000400)={0x0, 0xd4b2, 0x10, 0x0, 0x3da}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000300), &(0x7f0000000480)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file1\x00'}) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pread64(r4, &(0x7f0000000180)=""/47, 0x2f, 0xfffffffffffffffb) openat2(r4, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x8200, 0xa4, 0x8}, 0x18) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000280)=@v2={0x3, 0x0, 0x6, 0xfff, 0x6c, "c1ab15b103812e677fa261032078ec850145b5ebc9e58d4c5975f35d9e48a60fe3112be7726b08bfc03a58065ea9fe11988995eb4999bda7808e2cfd02cf2f8dbcad53e5e375761c8e5250782d24f40a02eded185c13ae93514ce2eae317153606f7e14648dba6e0007929a1"}, 0x75, 0x2) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat(r0, &(0x7f0000000240)='./file1\x00', 0x4080, 0x30) 02:06:12 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) 02:06:12 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xa, &(0x7f0000ff5000/0x4000)=nil) 02:06:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r1, &(0x7f0000000200)='E', 0x140000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) 02:06:12 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x8, 0x87ffffd) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xb0, 0x3f, 0x2, 0x1, 0x0, 0x3, 0x50100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x58602, 0x5, 0x1f, 0x4, 0x0, 0xff, 0xa9, 0x0, 0x8, 0x0, 0x36}, 0xffffffffffffffff, 0x0, r0, 0x1) 02:06:12 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1175.276019] loop4: detected capacity change from 0 to 39 [ 1175.283480] loop6: detected capacity change from 0 to 40 [ 1175.318101] syz-executor.4: attempt to access beyond end of device [ 1175.318101] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1175.319715] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:06:25 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x8, 0xc4, 0x3, 0x7, 0x0, 0x6, 0x210, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffff2e, 0x2, @perf_config_ext={0xc0, 0xb8}, 0x40000, 0x4, 0x2, 0x4, 0xfff, 0x80, 0x7, 0x0, 0x1ff, 0x0, 0x3}, r0, 0x3, 0xffffffffffffffff, 0x2) 02:06:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:06:25 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xc, &(0x7f0000ff5000/0x4000)=nil) 02:06:25 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4004, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:06:25 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) 02:06:25 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x103d000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r1 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) fallocate(r1, 0x4b, 0x8, 0x7) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xf9, 0x0, 0x8, 0x1, 0x0, 0x0, 0xa0410, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x800, 0xffff, 0x9, 0x3, 0x8001, 0x200, 0xc618, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0xe, r0, 0x2) 02:06:25 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x100000, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="c1b22d16512c4829729b64e2f306a7fb2b8bb602a58e7c11b468e746d048407a244f1be664800d84b9a2389e13ccee193e43e61a2b383d7df0b4908a05583a347ce1a69f48820ff179f32422facc0848fe8405c6b7d2bb50a4baf7490a130f3a3c23a4e58970946a", @ANYRESHEX]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r1, &(0x7f0000000340)=""/162, 0xa2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @rand_addr=0x64010100}, 0xc) [ 1188.408972] loop4: detected capacity change from 0 to 39 [ 1188.423421] loop6: detected capacity change from 0 to 40 [ 1188.454973] loop6: detected capacity change from 0 to 40 02:06:26 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xc, &(0x7f0000ff5000/0x4000)=nil) [ 1188.544799] kworker/u4:5: attempt to access beyond end of device [ 1188.544799] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1188.546400] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:06:26 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x3, 0x4000, 0x2, &(0x7f0000ff7000/0x4000)=nil) mincore(&(0x7f0000ff6000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 02:06:26 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:06:26 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400b, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xa4, 0xfa, 0x6, 0x1, 0x0, 0xa352, 0x40100, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc803, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x841, 0x0, 0x1, 0x9, 0x4, 0x0, 0x5, 0x0, 0xd9, 0x0, 0x8000}, 0xffffffffffffffff, 0xd, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:06:26 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x4, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="03ffffbb886f7366ceffffff7f0000000000000000f000", 0xfffffe60}, {0x0, 0x0, 0x2800}], 0x9041, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xf) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x23, &(0x7f00000004c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x8, 0xfb, 0x80, 0x81, 0x0, 0x3, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x7, 0x4010000000000}, 0x0, 0x2, 0x1, 0x9, 0x6, 0xfffffff9, 0x1, 0x0, 0x7ff, 0x0, 0x40}, 0xffffffffffffffff, 0xe, r1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x2902, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x4) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat(0xffffffffffffffff, 0xfffffffffffffffe, 0x420800, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x803fffc) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x2, 0x7, 0x7, 0x1f, 0x0, 0xfffffffffffffffc, 0x28, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xe8, 0x9}, 0x10000, 0x8, 0x6, 0x1, 0x4, 0x3d4, 0x1ff, 0x0, 0x59c7, 0x0, 0x2}, 0x0, 0x4, r3, 0x8) [ 1188.662927] loop4: detected capacity change from 0 to 39 02:06:26 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r1 = signalfd4(r0, &(0x7f0000000100)={[0x1]}, 0x8, 0x800) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xbe, 0x1, 0x3f, 0x9, 0x0, 0x800, 0x4412, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_config_ext={0x2, 0x3f}, 0xa0, 0x4, 0x80, 0x1, 0xfff, 0x6, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, r1, 0x8) 02:06:26 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1188.795907] kworker/u4:5: attempt to access beyond end of device [ 1188.795907] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1188.797316] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:06:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:06:26 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400c, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) finit_module(r2, &(0x7f0000000000)='.\x89})-+', 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1188.913957] loop4: detected capacity change from 0 to 39 02:06:26 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x10, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x10, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, r0) getsockname(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMVOLREAD(r2, 0x5313, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) readahead(r1, 0x8000, 0xef6) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x1, 0x81, 0x5, 0x0, 0x0, 0x9, 0x8288, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd5, 0x5, @perf_config_ext={0x0, 0x100}, 0x8, 0x8, 0x200, 0x4, 0x0, 0x4, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:06:26 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4086, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) [ 1189.042709] kworker/u4:4: attempt to access beyond end of device [ 1189.042709] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1189.044417] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:06:26 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x80000, &(0x7f0000ff5000/0x4000)=nil) 02:06:26 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x80000, &(0x7f0000ff5000/0x4000)=nil) [ 1189.223719] loop4: detected capacity change from 0 to 39 [ 1189.331147] kworker/u4:9: attempt to access beyond end of device [ 1189.331147] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1189.332652] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 1189.416232] loop6: detected capacity change from 0 to 32640 02:06:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:06:39 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4087, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:39 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = eventfd2(0x5, 0xc0800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000100)=0x100, 0x3f, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:39 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:06:39 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x803fffc) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1cc, 0x0, 0x476251c07c274909, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x272}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x470}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa03bc75}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9c}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x23f0}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x112}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa3a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x64}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe0c}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x12}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x8004) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x2, 0x3, 0x228, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4, 0x4031032, r2, 0xaa6b4000) setsockopt$inet_mreqn(r1, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x100000a, 0x50, r1, 0xd76c8000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:39 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @broadcast}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) fcntl$getown(r1, 0x9) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20c000, 0x0) [ 1202.271986] loop4: detected capacity change from 0 to 39 [ 1202.284508] loop6: detected capacity change from 0 to 40 02:06:39 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) epoll_create(0x5) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xe1, 0x3, 0x1f, 0x83, 0x0, 0x7d8, 0x20000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x2, 0x3, 0x6, 0x0, 0x7, 0xffff0000, 0x20, 0x0, 0x6, 0x0, 0x6}, r1, 0xc, r0, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1202.414894] kworker/u4:1: attempt to access beyond end of device [ 1202.414894] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1202.416428] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:06:53 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40a9, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:53 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x2, 0x70, 0x7) 02:06:53 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x100000000, 0xfff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:06:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x401a012, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:06:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x20000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:06:53 executing program 6: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000002c30000fcffffffffffffff0000010000000000"], 0x201) chdir(&(0x7f0000000140)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @empty}, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c2402, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/162, 0xa2) 02:06:53 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mincore(&(0x7f0000ff8000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/60) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/66) 02:06:53 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r1 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x0, 0x5, 0x40, 0x0, 0x1ff, 0x2000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xad4, 0x2, @perf_config_ext={0x4ece6e5a, 0x4}, 0x8, 0x10001, 0x5, 0x3, 0xbc39, 0xfff, 0x8, 0x0, 0x6, 0x0, 0x346}, 0x0, 0x2, r0, 0xe) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x2, 0x8e, 0x0, 0x0, 0x8cfc, 0x2498, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0x3, 0x8}, 0xc, 0x5, 0x80, 0x6, 0xba1, 0x63d5, 0x200, 0x0, 0x101, 0x0, 0x8}, 0x0, 0xd, r1, 0xa) [ 1215.590746] loop4: detected capacity change from 0 to 39 02:06:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:06:53 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) lsetxattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@random={'system.', '\x00'}, &(0x7f0000000180)='^\\&\x00', 0x4, 0x2) [ 1215.640897] loop6: detected capacity change from 0 to 40 02:06:53 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1215.713799] kworker/u4:5: attempt to access beyond end of device [ 1215.713799] loop4: rw=1, sector=124, nr_sectors = 4 limit=39 [ 1215.714663] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:07:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:07:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000003c0)) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:05 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ff5000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:05 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xfffffffffffffc01]}, 0x8) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='\x00'/14]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x89a2, &(0x7f0000000600)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x1800}, 0x4001) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3f, 0x80, 0x8, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x100000000000000, 0xffffffffffffffe1}, 0x4800, 0x6, 0x3, 0x2, 0xbd, 0x1, 0x5, 0x0, 0x18b9, 0x0, 0x9}, r3, 0xe, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:05 executing program 6: syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000400)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x2}, @initial, @device_b, @broadcast, {0x0, 0x1}}, @random="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"}, 0x285) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002d80)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000002e80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002ec0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000002fc0)=0xe8) mount$9p_fd(0x0, &(0x7f0000002b00)='./file1/file0\x00', &(0x7f0000002d40), 0x3082c60, &(0x7f0000003000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '%]}[%#/'}}], [{@fsname={'fsname', 0x3d, 'trusted.overlay.upper\x00'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@obj_role={'obj_role', 0x3d, 'appraise_type=imasig'}}, {@uid_eq={'uid', 0x3d, r4}}, {@obj_type={'obj_type', 0x3d, 'appraise_type=imasig'}}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}]}}) syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2, 0x9, &(0x7f0000002b40)=[{&(0x7f00000006c0)="274b21c64cafd0c604262c5a4fbad69d5915c49971d7b439d1d820451613693330cba51be0cd509dc5c2a2a80b409823a6476acd3baec74ffbd905fdf4aae31c8889b13ed60eeed93af0179296f90f39219560c492d449ed8794e317701fdf8f638e2d133dad80866b47f1a725b2a7aa6627b7041fd2a2e9d5e59a3675be90c0ca3c5634b294820e91450d3331df1138acd2177396164db7443cfc2eff6c9bc73fb01f4364fda5ffaf010ffab2ba5585e8c3ace5089e8cb4a47513bc7de34da9e98b47fb471a06d48ca4a64e09e3bbbbf1832b9febcfd50262", 0xd9, 0x6}, {&(0x7f00000007c0)="d1eace663bff37fdd8b0380ae76f7f23fdf7f514cfe122daec6c99244356c5d41005cb01e9a1d5a97dedebb582f747f48727141eb67cd13d3975a6c3e23485f3344201d24a3b0c05533e458ed7cdb7a6ed66246c1acf6d59c9ba56dc545a6853b9183a2419d3", 0x66, 0x6}, {&(0x7f0000000840)="2f6b775741c340f367e8a2ef422784562683ece5fb222c80a6468e9771b7318cbbe1a0d96202639508a0de0e28705ee8658166d548fe72bbbfcadfbc417a18dbfa220dbd4323cd203d63fcb6d3fad2481b5addda44f27f58d6371ebce961697a5337e0ecad64c18df7dfacc571d8ea861d1412d10f27ffb074546f9af1affed409d4b3f969fd8ce51053ac35df7b654f547ac53fae703fb6069f676a852eb0dc4b3557c13724f4f32850cc88c6720c82b2d761f8716af97403162ef620f971f51c1fc7f249872ea8965c28be2c03423c1c9dc965a4ccfc20faa3dbcdfd8d40223c9d4bebdd51d10382fedc57f19ffcf3f7b8fcd13db706955880868abee753eefd403e897473fa238f066303ae586e559e0993c379070fefc32eecc81b9c773f2dc3dc02a994940435e01767b7b7ce44f6ee116c7f7ee231e5a566a1b0d17c9f818828ad3f153a20820ec6b8c23e6ec3bf16ab966f81fadb0f169dedce6691cc58557c733b088454a2c4bfb39f01d18959e29a6e19c1a26e0d7e4bf4b618fe9d2dc87a39891447d1525d2955342825bd65ca9ff04f9eaf20681fe4f14212ad44618c26975722075604bde4a367b32e1c78127508e17a88f19827ffce97c025c7d838bf24a556729701b7bba30add765542c609523a44ce48ae6ae9cd647a0c25f7d78e4c9143b8cbf5fc056dde57df7af8a26e35b9438dd13b7fd78c90fc876c721bb5f3c75287e8b7326df323e22aaab4d2514355765c9bf8398451ef63da659d9391bad798be8bc10167626fdf7fabc520f71e037bdfcf103a3355ac468e9bfc9cdb7890ec98b29e3e6f20f88d25d607d44141e8642f0d71839b4d62adbb9e2f376eec59af7562c3b106df1452bdb74f443a779668892b9a315b306ad08d8d6afabcfd707d56aa0fec8d74651501631e939ec237fbcf069c321a6bcf4d041fe07287e3141dbeed8364d5b8ec155bc89f3e666b89d77ade8d237acd04d02e825358ff226ca20880d144ed71a7824642dbea09cf4ca506e6ec7051ad5308b2802af6bf7250c72adf9b5b9fc848caca61a0bd173dbdd0fabe6a5d678a9b8e342ab05064a65aad36b62108089dff9c7e3943d413265dc0c68afee6288dec95d747c97bc59acb841ef2f821f7b054319ff60266f83587d3b8b82f9cce65efb001bb49100cd570d57f62cded9225f4a9398654f86d19309782f03325c92d084c7b2317455eb6b4e287bf13d48749a6d0035aa8c2fae7f4699f3890b07a217c8c92ea7b2c47e30c2a6cbe0bb19813e83815837c7c673b7b53ae3b50758e3e45e1b483ec4741ded8721c521463eaddaa3e11c3368b09f7640ef8ce042152a41f7ee1b31d1cb2a2730e2c1ca34cd61acfd65a8764edc619e40f1016ff1c39a38aa51f740b552393e39377594415c586d578c6174ac9e60f10ffe892fe804de2dbf60f2bedc7546e5fc526fe7c4e01ce3ecaaaac3c26584521e29fcedd21d6a05e2463577103f8b97cd057c741ba89326a63eb1a0dd3ceffdf9acccc5de1ee5c2a615797ce91b38a783f9eaeb53409adbdce2bf95db846c518fea6bbe1a47a22227c15aca109ec346bb77f3a23a018ed1033f62ff56889b32c117d7ff9982676ad8035a0ed397dd280b2f5613af812e900fb38570a734b4b5fecf97df93f07445a76d4121f58f5f72813064d7abf9686cb6bb8bb572d892942087f8dd5b0b04c8b65dc40faa47863a6da71bc7f0a0167f7dc3531f85894480afc3ac64dfe7d40eb5d64c58221ea37963ab91f028c909eb88c093e07a9185b8eb39a138b5e8095d3da98a68ad2adfb2ccfed6cf7d43939f736beae6a5432de46d9a3b421f61c069e6c4cfe043b49c5e729637013ca927e22a5673f417bd2455e83b643389367dd3b1ce41510cd451ec609796827fdaa3626f5c2f754e5ce705b72fe090b1cbfa53bf1f9dc4ac15ea0734fb4c8c3e94279bfa1b55980b52f4af432417e204b2d0582e77ac0abba0354374a0475a0f0487ba84d773807e66e04a6386a24fe095d029902b682681648bc20de4ec76b8b64fced94fd280a8d71258eaa04397243ec9fd2478ecf01b5e43e0cc9c793625cfa561c8ebf8403f58c6ccd4613016dfa2c7df389c6b15e3f3ba07377bb4578e612657800e0e042e95c658b45760a9590cad6806d0ff5864987f1cdab05af77763b2ad3e59ecf3194c91209259df18d4a7858b7d9eadccb1df6a5ed72f64600f710ecddf9f4b1eccb542dd4f83f628d4d6e1c2342197294650eb6d9d5ddfa59fe193d5601342fdff7dd561eae9c78e974df852c3521b0bea9542d3582717a580deafe70e69e3502a2077f83121e92e99a8aa09e23f8275d796eac1a4cfa8338aa7e98696e02889379bae2ee041761578f4c73dd00e446c9ba70e74445e71f5907b61ad1c5fc143aaedc61bac79a306ce5ad877803409e32f7c2dddd0ee427da8b30fcd2c87784388a69114f8949c02b89d3a8d7522fadbd80c80c1fc2a84df97fe32d792ce0d124a98a9b8d6df5b4857f2a6ddb4d13003937e185799292f0c92c179641382966230f73c9f94d39db6027c3c690af259973a9f870ec7ae11dfc8fb16f35ed0ae2345f6501a2273944457d38fb4941bf76d2d603eb678e1842ef1eec27a82c81211bacc09d6a73e96959da93ed17efa7bf018cf209250b1a944c22aed6bcebe48b04f0889a06d93692717513896abce5a3714b68efa9e683315d7b18ac45056239a330becc30d19033179f88bab44e831356d89880ec686d3f5f01c573699ff7392b972bcb59434ef33c19adf20ccaa146d6994f4fb06f905d1aae5f6d282e5cc0536141b7101f8c05730791b3e44d88223f3cdfa15b54ffeab174047cf54f8a37932b856e448ae7a65656827d2f2fae48e86d65ab79db34603fea7c1801d8751d8eaa5d702f7ecc0534b6cbe9ddd0082a1c074e7f93c1e19b385a7ee0555034298f0016c5b7ff7c4e17280ca5f9fb9e68227000d9785d6cb12a58e2b0fc2a2201602f3c8f30de98aed2baf46d94b821076aa39e8e486f2360df940567d2b6bed954cb9efc2ec3fda8dec57b66afa6c7b0a9fa96750dfd20368a8261f0825e6ed16fc6783de7e849117fcb983cef5e78f79eb1e697a10dccea3130dddebbe97d620a332fb62f89e057b43e87f2a98a4fb6e380c4604ecbbda70026171dd9ab00a3e9dd18d262ce0179f8a44efe902056b93ac20e5b030aa2c5b0f1a0fa22e6d61c9cf91ecea573b65679fee8e27cda9553f10412cab42baa40ad0c7154432c44e8f7c5ce2073130ba145ed71f41c4177a71550883a7e14a5a69165b29eb2555541b586189d08dd820c250c02563284fdf1aa570c35885f4c75cefb5585d1d9cdc312ad0b8d466d12f23155c5befe0f2b5b3841b4b621c3ce62daea5136a5bd1f4417dd6c97dc814a8388a35b9516f84f32834c3b8b7710e0f9379035b053ba89fb0f0ffb399c464166b4c27eab3241d540a872b1e0cc002a392f6bf24168707f93a45f4f510b8a7725c4c51ef4cd63a87feffd3d55c24a1e2c7a631543de8e1654a76b1acb3a845e2f1c13af81dabe4f71ee52ccc1b9e6005ef511519303f359f9eaf88e3f2d943dba6538ab5549a5f92cf5347a0b3613b315583f7251827414c1eb1dd06c0d031fe65a5bfe7e1fe4721a8146157f8f0371264fa55b99237802cb095607985a0b1918ae221997eb3b77947d942774f208c833812a88f8a6bdbc901d30c651c06f05a2cc517985b58022b630785885687acd52dcad6ec797732db90695b1e334edc90318a6d32f06aee73b4c655d0058bd1d82dd0683b0e54b21de329a12f38af35ff82244352eacf223ac6b0fe8749709f86cbe97737ad554433570e502e2be64aefdf424d886f98a78ea3642ee98c02eea57baca2cf0aa8b3cfc4a8efa6c18c0f2fdf2f5c9c5eaa53ebf4e3ee028c85abbe9b17e0432e04990be38678fb4aa03f8802a8e4e40f27ceaf8abd090304cf97f6fea4216673ec608045f24ebaa95166a6753df321bdcd22bf741b07d1e38cbaa1f0c7179d82a1f875cf79a19784e917d6aca9ea3ecb979323c8d18b20ba2fdd1c90a4e1d3b7ec157138e9c62cde8a85e4132690c05d23c11ad9430fa7a7d6ab0b3af3ea6bcb1f968197bff98cb99741c13404da18a080e1b43098ed030f8da945a68cb4486845cef9cc1640365dddbca428ee05db635e23dcc363ed09a52d7692ef377ca070779b63559779c2ee1a9fb29c18455718a00af7b77249b23a58dc689e7455b7e4418ce90c8a3d9ca190bb172fa155f43e9fabec0498619727cf9ba2a8d27a61d7f74a14dce4a777c6e0ac06fab2f293673b58a3831e9475cb4d43c28ec1ccfb6b172108f58fa229bbbc41f44340837e4cae745f7029d79adf4b343e4cb692310a9f226d2635c7bb8a296fac732bbf35396799176aec45cd25e4ff0737c1c32a7df13731c351c57df9fe0b73602b6a366e077ee4c4709a799e09bbdb681a4bb8e7ae6fefcca659d087d9c500b0eaebdc5a02414ea60907e28cf0a9b6bb99be6c5030bda259910272a3b11f3437c826230c1fbf16d31e9d9f56ea60e4b6d17d80473f1735afcfc8f900a577a367f6dfd80872a30e6aeb2fc05a9affbd7d6304bede5b8b9b6112808d0116e90de30bb74622d2c541af625a43287378e8f797dc6458e0ad8f05a5b79a365dcf1dc6ec3555210a3200d5db6be0e8666767f071faafe8ab7ebfa1e33cc06c063d2314cc5a3c8402a5c46d14692e2caa61bd90e60f9e27007e49085fc09916ee7b035d9942e0eb6e8b27510438444135e7fac4537eed39d2737c9dd3e7806d657cf1a01ca5c2523ca0b1eedc54da4d91f4fa179181ee22ce97c4e7033b33db04a031196b3bf9760a5de3fac4883d6d327bb5d7c8786e7e528800b857908cdba4c75650a5c879f3e3648673d4c1bca280cdbfe919abde0f2180f7f0993b6c19ecce741b5791dab40849f088bf6770dfabb0b29742529ae79f044abe6467e957ac5c33c2478ba54fb01fbc244e25800aaa6c9f9a97541f9be1dc9157ff98b820d517a1d70d734fb28cbd70e2e2af6cc7acf0ae55439ca5cccc6d97a84fae5a0b8819038045c9135ff3a32621fb956719387edb976a743e8e00fba24eaab11acee7c1915ef6da4e3dc2ec72d169e6e868b28113e5c7fb2ae83573580bf88c0f34ed4ce2bdb6e6d6289275f68b3249a2ddb127fbb37d0810e973359641910610868f86383aab0fde8c972e07eebe9e0a8f0f32ece7bbac3698a8677419c2701266cceefee1970db1d60779e2fd0e14b671caabff2813c0467b2b1537e84952bbbaadf43ddb435019e58e0645789b12d965c5c8369e5710797913e806a6d29fef4a94bc619d831eacad28edaa43c656f4da015317cd70b3ebd60d52695d36c0d94129de9467c0ca502f5af8afaff58eff9281c9de73549dba7ec9b26d30bbeba0023f505895351b95287fcac872c81ff8e50b35967684f4976eeb8f0448b278968e024661d74eb097014342ab0498ede98e47d0b9393b5b332eeb51e21889042d4627d048001b2d2c251a36593377e96465ac553d54b866df81974217d9b7f2b5b91ad44cb80da99c238f37a2baaacf22caf83d271e4a4936df0ad02667bf47b4e8fa1290863a9c97a523cfb8885206c1484ec7b34250743784497417b6e49e821beecc4c1bdde612832bed04144d13a05dafa81bcf6d2182e87d52ed58a3deedde05f6d1a1ca508683c6f7e2db3f1ffd21c65a843a15f18d0f2529a5f1d4432299a167b3bd95faa7cf3a93d64", 0x1000, 0x80}, {&(0x7f0000001840)="39ed981a042f938eb5198dc5105d526052f41c2c8ca4b2c982cbb5bc2e1f79af7dff3342cba892ceaa167a5313ef7edf22a44577ea7b3526e428340ea91e1092b5e4c88edd4aa9aad410ebea5e9b7c6bc7b0dbfec5c44d4c7f5cbda46c6359b9cc0f9e882b1eea8d1c1f4ec8eafe5731dcbb6c324bd74037f2f1bee37e67bb73c4c37ad2f31865d6bb58e1a8c899c1df8887709bb7db1905ea7a0677a1df868715584cd188bcbb114614bbe8531856a29269cd9fa400f4a00976c3343da8fc923eedf95b8c22e951a5daa3fe3d7d2b6df3bbe2a0685319bf6be5dfd00f2ee9d5", 0xe0, 0x10001}, {&(0x7f0000001940)="176ca10b53c2b37d7c794790826a4169ac4fd45a08fd78ddc75d2e4727c1f90da9e114e5cc50b1e1d845787f5bb844bb4b75e9497942c468e9855badf611dbc87675018348f7ab9a47d2c11d6fe4f83df8b6908490c7891de0051b9e7f4fa134783bd1f7ef9a1d38b8d97718d7490299cd39088746d0c5466f9d762598cf0b078080b2a9f6b6ab731e969b35b24b6b8daa6f02215166a77b52aa2523906268c15ad2e24a9bdca67d35d7affca461f3b5543c5fb4", 0xb4, 0x2}, {&(0x7f0000000300)="b9d964a948bfdd847c21e0385ad7aaf0371bf43aa78d6e813c2863dd0f8b8242c1229c74cb", 0x25, 0x70}, {&(0x7f0000001a00)="26ecd6b7cd9544d18927d0af62d00160ab8fa2cfcf0e3ab97580fa1791929e5a61cfeb3d363bc1c99c591c3f79c9f7f5c110880cf0b3298b6b3b981bc5dcda05f91cfe886b93341284db95a2c223c90f601aa755e5f532982cd5576495e8ccd026f5dadaa903db9b93daaac7e956c36a39255b7d8d292a6792cc0bbf6927349ad4ae5902613dd7691a296d73d0d40ad0d3dea6ab66ff1b27934966daa722b9639c291bd76251d7bc3cafd123a533aba6616143c880f68108fe82f29f31894cc1ca94a158b74690f5697c015a2d928b45c3b4faa64e3604a13e9bfa30c7f4286eba3ae90626e305066449e7d5dbac47f860d50e21a91059f655587f945a3f997cbdce1901598e668a4886d9347dee9aa5d319053b8e88ee257a52c0928feb5871fc636abcd5ba894131165f809fa6ebea2ce98ba64e7c507cb2ef7173e20c32c59566117dacf92aedc0a8e495ad04c9d361863ee7d9116dd710c259c110b6deabb0c96ec11451da12693b03403976f75fc0daa6f52f5e1a473c9f2d6c7a67d33db2caa7c5bef6d5793becd4083847ee92c81bd51bfc6fe7b87dfff5bd24b2ac504853395ff0214b9111ddc2a99e0f0c3fbf49202db32bc84cbec0f7c9cf3f7a7d687ed127c0beee37988212ba294f6a51dd6814f0faebbecbc7616c9b78654a65bddb8c44a8e8043da9c5e1caf60e64c5e5dfd3b9122d6385b80d3f9e804ecbde949587598c36bbc8f977aae53cd69243a1e05e7b691be9386d9222b5dafb237155cfbe662f43dd2b842eafed0922a7cd96b63dcf651d7966c6ad3840b9f97e95da630480e0f609befdee17d450f297b4075688adf2785e325e39b20d6cd805efc0383e0c7d1de3f7fee171bb9111168a3b53983ecf4f0a4f92635295d3d7d1582eab18dd31f027b7a059dea735725d954d3bd69879e88140b5d4089ae4124de8aec7a440ae30826b9413a1b7e0edc20d6af0a81f5423ba7767694158916be032359923ca308ec65c266887e12093a9b4a2c3fc5e51eb258104a3427ce15de93fff366a752dd154d9f534d43c6f82351d436487f243c41097860f9f88ecb07200ef00b7350be9eaa0358a31e5d12bf52c3fd75e084f0d3eb94aec17db6f88975cd7423915c1fa1053b46eed4f476640e7264f760c9d34e41bc67e5e76e23190610880bd63b26a23ddafad8213ed00f2df6be984ad913aec5f177d827214e96e55822058e23c5802a7b9376d30fb067ed809c573cd956b435d4abe7301a6e98212eea60f6df858913c66f2e4f23bbfc1fd41ba516659816dd9a711ccc1b36837f2fb5fb88292a3d541e99a69b59eaee5af6eedae7d521b07932dedd4b16dbf9972d6d9b1bd702f3523b26aaa7ace88caa00ddc8f53284bd603fb54d40248f3d05b7e4a89bb552664606ed9ac7ac3cfefb25ad55167e5158ad2d8eaf1f8ef1cd27e707dc377148e55217549b83d98f9f0314a0f2d6a60d336a8612c5400244ca95dab11ff1ec63e45d63c5da6402adada75c4eb33330080c6d7b4200965b592ccfec3b3931ef5a1728ee0a849558546f77641db39cf9016f0dcebef4b0362b8de8674f24211e44c02e6d6c162bf48a62d1035e19bc2fd26916f39dbed472b1f78d3a8c72ca3117296c88bf9ac7d244eb719c92c75748b72be57e99e329debba559c61463a325c63406bc8bee61db34a1d3e49830dabfaf0d6347a9ca7d68ea39da6e7acf92b9a351306749fa866c38449d4c66f17810c7b7fc78705ff7d51a0e1f94b25b9c0445002765cdafc0a74a6891d9654e202a3d7671a357673918c11b89e79fe16009767801ee67aa2d2e6b1293d6f199d189bce05bc8ab6a14aa9792b25cb6dd95ef927305d10e80e7493ce014c21a7705009ebbf4a7a7ed9879d1419daab2f6160055559bb0b895d79e8ebaf0f624aa5d6e20539f99e80313605f747e676f81144b97bb725671dd41d2f58e41e5ed2fb921f23064dd2ed9dd248df0204536ff65cbc0d7945de272b35ae6c069e221ed4c9d8f58d5c46ea6f8eafb5afc099868f27dfaf506e046cb2209ede99c085e6f4cc6c49c257e84b31fb07229fa05fa2664904fd978f6ce8cca3dc0d7ca66b5b7a8e97dd935dc5e8a14f504597387ad5dd0fd99db7e5ba6cf83b3d139d23b49d8c1341b12aaa88299caf72ac98847d4fd774a6781951b49e2c123f72c0268b287c681c9ffaae0bbb2b10917f24ff1620d60e47d0f2b827343070d3731938025ac102a9cf2a2cb2e5ea576863297f96aa62c5776e4c2e2326f89d578dc774affd964776902831a5fd814c95ba6a208d25c2b9653827ae4256beca2ff52891f5a4637118ef231852bb1ef969d9b68f305ef1c1d065fa42ab782dc8ac2254c7f086a3f7dc83e52e66e78ce0c77a6aca51b63dca6a4a846e059040f5d5a62bf09bd355203ed08b3c5e506f14d87d650eb3c8f7d8186f2f98194b0a79a13433d581fa646370956dd16a592ff8c355e1246e97ff8b012da51f567166c59d075f6064f04a688298f4a184ed09e4f692afff69eed0e877811df3696f464ffa8febe2088afbd2657cac94ed5c75bbb6dc18a7d38554179e2fa66f4eb421ee94da54ea6f2ea1e289c79879be27b28210b46d655dbb1a0553ac468706aef05ffdf181c0d478ad059cdf8982a497b885ae0f2b4073c6fd2eaff6af0eab47cf68febff7d93a2b3d5e886bf5b264e4a167435a1af3ffcf025c98484d33006130b2c76a25d736a0aefbad90af74c18500cbdcc5fd00f752e7a84d363ef0b7c46175cc768acc15f78d1fcfa44422ef36c645ec1c8ca2e9ac170f9bf5f5f25a336d9f6dbd9cc3e1ae5b16fb1fbd0286b61d5258a439864578572171eadb4bf8958ede64caf404434260d7818f8aec0ac600157a4dc7f9e6f4172917d207f90d360da8c2905334e55eba3d3239d9053e9a6a4e729a304a846ed4ffcffd0c197cba0051c9328384034d14ebf4318c6b58ef0471342c12cec04c3e7b8041ad52e5b663f095aed72102e9cf5bb77d56ceb0a25d620c9676ff10abed547eb5313e21d1a9f7f86f36b669ef2f19cdaaa5bbc9d75860e723bf0efa1039852e7a231de7955474db5d931c4dc0d1ab2cc374ff19ebb89916f1eabb8299662669fabed39bba225758a339adfe8d9a5d397567e4ee3910f72f369717f2d8b1f258f7528779ae01f53a14ad82464c1e2fffbf0d48ae782cd778234ccd21d2702c7cf662687ab47eca75ad6c2a0de86f33a45618413385765558cf9446ba800ccb2205fd8f7d4abbd5bba53d63cc3c1456faa30e664a7c4be526279e06fddd36d3ac62d2f25148130c83a66fb145e9d144943cce7772acb3c4a6aa57f21b02d815189a51e2ddbeb5a279948d77be0ab4c01475e2313fef9a5a8244ad4110d2d246ddd570bf3df7f258f2f7787e890b7d52d12a491e9b968d60d41117093bbe06cd487319f470ebc6ec3b3c0e2e3c9cf3c34cc6f3e2459917642848c2f1d868c62458724a7bad094bb58a98b2be34309e0306f27c636a533fd16783e4ad73fcbb4954e884132cbda10fb62710d14230363a5d4ea9b76b1a1544505508ac5249a9b7784cf30da9df2bf4429dfa836dd0cd1dbc2b6a23ed7b7f5b9072ae637df491bc69e347d00594fa42cce29caa3d47a0dc6f6627edc6438fa7f248472610e34bb04bf0966899b71cb8a2c3eb80b558f432f3696458a96f9b6bb1bd2cb5299c0b422e6f88c70c018a188e9bae9a357cd959a4a2875ba8ddd430ef418d736bd634cc931b6ff0674c985dead679929fcb0f057fb6daaf59a84565f22242fdec5e0a4d50dd43c6d99be8569258951a5750a9fbffd5df72e4745dfb194e0bce7a7a187305fa19d999a88aac12006ac5dba8c37ea2ae40fa1e0b6c574c0197c26921841cb937309d35144b38419d3a4d9ca21589f3f9a44eeb841e893276360be27bb564b4816b904dbf8ef1a1e372566d24f5d57aed4c0cf9617841e62d587d1cd4f737177bfe06dd10d2d8feca1facf11752ca32d1c73509168b2a7964fa8e82ef3af8d3c2eda19bc739cabc9fcb8e732f134b70583844e1c68f94dbef900d522584702855d1df0d283911191de73a9d99d0b09947b1bb4c8356e2e723e1691a4248fc5fa23204a664b38fd52da559b0802d2e6fa181b96cb232be8588dc766fd69fbc6852a92bf86cb4c90b62d487e7bea29f8a1e54b6728c608f00ea4ab11d3065c29650b7bc309916d68fa6c5cad92f3b2ce9e72b58c834020df1c0427a98aeeea153136d7ef211645f4fc57f21cee77455470356cc34c2741f4958a7760ba3705efd0ced1439b27159c541a472a7d53f022ba864b02a6524b73a64d44bbe33494d47c469fa16441703d998eb8dadbbd7fd2a94df695a1de13a5be37793a8ad60a6b3b6e5f4f2ab26425189353dbfb82997467c7a58bcb00c8920c54c1ed71ce68b976366e1240cbbd231d673fede2042419b9379bf5a8c83ca83c781652e2f553a93e017b75047c623c584cd1fb1ba1eb862878ff848350ca5d81d53b53dfc31781e050a1b71886bd582700891cf63099226ccab539b93d866863817fd24f201d10e12e561b7fca4ee2aaf847f2df7890a651dac609a04c906181d1a30a10efbce4858d792a56191ede36b52e146a8b36e582ec2c7273776568192c26c7fd934c4328bc92f681c190777df73fec6b59e6f34dc7fd28896ad8aa8d00f1fedbf4944fc4481fd59b41137b7a429aff382b2ebfb88bf8706829c6404715b55af32d890355b32147da55522d895311435be3753a05704d178113459b8879418b9741ddd19b20dc7184aa2ad6c931bba42ccf16079e36f60439c4ea1ff8a5390d2d5585abc9a9a56cf2d648294a374737c81fa870c5b1520cddb713f87bf134f0eebb3f27a4f282ac08100c845a4acc6e45047a1d1574aece1001d46c4127e5bb753d431e8f8acb87bd4a4f2836d72b596f4a39a18c0ce32e40ede8c120b189ec175f3e9ac982252c54d949f33bd77cbb0ce3d6b70ca114445d7201675bfe2c2b8e5641bc1025aba33dc0182b85619aa2a2278bee387423bbcc8ab19f1c190902f2c7834c0eb98af6b9f6d3d316d9ae94e28ec322c289c4a315cc103f7f91fc15de22305ff6906b1986ae1eb298392293c238720938b2766d7f2c49f7b7f0b3cb7a61d34608e6c3e83e96afa9a5cfa3cedf87748867d63372c3d02dc1141dedaee8b193825e2dd85a45ba02739eb17014caad382ef9b03f474b168c0660c361c20dd27ad3ef14f08cbf41ec3c9bdfcd2083882fa6ff4a8e4dbcc0b218d92c284e3cbdcde0438396ef99dd34e1d38115c7cf9946fc561b70744ff9f28b905d3a1e4ec2e367a2f771e79aa31a410df2ac959e02d55703b906b88d1f36dbd8772b4c7e2475c707be583cdb0aca2877e51b126c1778ae86c55f54e0c4287bad0533d9c2cf387d0c8e8f93761b7d5c97641be87b936dd526d4c32b435a6855a4b9e3bf84af7348b04bb42abc349a46e4adb656911517c33c1312ee90fc0637decf0120370e8baac5dbb8f83f0fa3b7eee7ed2f255165110df60f4d5307413caaa7ce8fc363c748d077abdec3e74b9813bf1d25ca07715c0e46ae40840bfa4999540c633243b08dd21b08099cad3405697206cdb5731c80543c3c819004dd64b5ed5b54725169cac7cbcc12f7d7a78b4a94d0450d42b56c274987c0b473ed2d970c8e432d55451095fb78635a98134cc2e785022de743a92905045f9eaeab963232f39b50cd2a8a5986651ec899939126a4e57050e8318b3bb67c784eaf771b505da08", 0x1000, 0xd9}, {&(0x7f0000002a00)="f3fec6f52d85ea323fc60c479efbcc0816eec9e1e21402347aa2e27575bf128049d5d942d1164f0935b667fe9d480019cbdabf64500d934ace2c127e8d7c650aea9179b997961b347b2fcb41ee9878572e0aebfd0f7eadfe6a8ad73ca98fcc94426ea5806593cb11e869689c2952ac19ad426cb3a0fc4fb580a6767fc795024ee92ce9282bbf7ceaba45cf93048888735e694fbf62d4d712f88b9256718246b284fae733459ac3adbe6e9c1910b4e9fe31598cb993833b906a0c5038a0f93dd8ab6f78bdf172148e0557", 0xca, 0x2}, {&(0x7f0000002b00), 0x0, 0x400}], 0x20, &(0x7f0000002c40)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x65, 0x65, 0x2d, 0x70, 0x65, 0x36, 0x38, 0x6b, 0x2d]}}, {@mode={'mode', 0x3d, 0x555}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x32, 0x35, 0x38]}}, {@size={'size', 0x3d, [0x37, 0x70, 0x25, 0x65, 0x32, 0x31, 0x67, 0x37, 0x35]}}], [{@fowner_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@appraise_type}, {@fowner_lt={'fowner<', r2}}, {@smackfshat={'smackfshat', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@appraise_type}, {@smackfsdef}]}) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0xba, 0x6, 0xff, "6d413fcfbf2ae2d7bab69ff83cd36c94", "84637cfd78e776eb8bcf79a842b5c515e97bcca2972067e43f20d004a5246d4c53ca44256db4a14993e107c5c2d7db8b6b59bc4b276453cb6bb5e3e64d3aea178cf1654f807245e9c938a66152d7be014a960984bced13171ad09168229d9f82f9fb815a6639268cec50948bedc2d377ca67e2d47472036033340c1c338dd8d0d9c9011e388262a6acbb5314ae15568699a581711ca5e80144270990c3189a5e5969c5f7a9"}, 0xba, 0x2) 02:07:05 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40aa, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:05 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x6000004, 0x30, r0, 0x0) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x4000, 0x6, &(0x7f0000ff5000/0x4000)=nil) 02:07:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xdc000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1228.355750] loop4: detected capacity change from 0 to 39 02:07:05 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40ab, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:05 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1228.374936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.382137] loop6: detected capacity change from 0 to 40 [ 1228.406790] syz-executor.4: attempt to access beyond end of device [ 1228.406790] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1228.407742] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:07:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x803fffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:06 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40e9, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:06 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmget(0x3, 0x3000, 0x400, &(0x7f0000ff6000/0x3000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:06 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x5) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c30, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:07:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:07:06 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000180)={{r1}, 0x0, 0x12, @inherit={0x58, &(0x7f0000000100)={0x0, 0x2, 0x5, 0x30c, {0x10, 0x2a, 0x0, 0x7ff, 0xd6}, [0xfffffffffffff4d4, 0x10001]}}, @devid}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1228.548738] loop4: detected capacity change from 0 to 39 02:07:06 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40ec, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1228.572575] syz-executor.4: attempt to access beyond end of device [ 1228.572575] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1228.573508] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:07:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:07:06 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r0, 0xd35cc000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1228.684552] loop4: detected capacity change from 0 to 39 [ 1228.705094] syz-executor.4: attempt to access beyond end of device [ 1228.705094] loop4: rw=2049, sector=124, nr_sectors = 4 limit=39 [ 1228.706312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1228.706749] Buffer I/O error on dev loop4, logical block 31, lost async page write 02:07:16 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) mremap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ff7000/0x2000)=nil) 02:07:16 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x800100, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:07:16 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7fffdf00a000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:07:16 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x2000007, 0x1030, 0xffffffffffffffff, 0x8000000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x1, 0x2, 0x2, 0x7, 0x0, 0x3, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xeb2, 0x8001}, 0x80, 0x5811, 0x4498e89a, 0x5, 0x20, 0x6, 0x203, 0x0, 0x8, 0x0, 0x782b}, 0x0, 0xc, r0, 0x3) 02:07:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:07:16 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:16 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getpgid(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x8, 0xfc, 0xd6, 0x0, 0xcb0f, 0x4a000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xffffffffffffffc0, 0x7fff}, 0x201, 0x7, 0x7, 0x0, 0x6, 0xc06c, 0x4, 0x0, 0x4}, r0, 0xe, r1, 0x3) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1239.488952] loop6: detected capacity change from 0 to 40 [ 1239.507682] loop4: detected capacity change from 0 to 39 02:07:17 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:07:17 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ff7000/0x1000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:17 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000180)="04000000646f7366d8a00000001000000000002000f801a680f11f11263f6eba66fd1b74bff32a68c8d66598dec0dbd7afd799857c881c18e48a2582ab2c7ed1cd1409e9be17399db88d7b96b7cf099167d805e5686cc77aa2840e8d9df244d8e49d0000a56742e26b735b1b380b960d000000000000508192f8189da0354289ed0004fa45a03b5a31f9e4b6dad3510d4d99612da7b39e2443274985a6b2237ff6eeaed6c2176d58b5120012ba545458c12c75a722c1b7dd8281285192034d90", 0xc0}, {0x0, 0x0, 0x2840}], 0x1164c04, &(0x7f0000000140)=ANY=[]) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x4000121) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:07:17 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:07:17 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x200, 0x631, 0x2) r0 = getpid() getpgid(r0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x6000) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xff, 0x6, 0x5, 0x0, 0x10001, 0xc0246, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext, 0xa00, 0x3, 0x20, 0x5, 0x0, 0xffff, 0x6, 0x0, 0x1, 0x0, 0x200}, r0, 0x9, r1, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:17 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x803fffc) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1239.705148] loop4: detected capacity change from 0 to 39 02:07:17 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) rt_sigpending(&(0x7f0000000040), 0xfffffffffffffd8f) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1239.751458] loop6: detected capacity change from 0 to 40 02:07:17 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb000, 0x2, &(0x7f0000ff5000/0xb000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1239.795775] loop6: detected capacity change from 0 to 40 02:07:29 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x24200a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r1, &(0x7f0000000340)=""/162, 0xa2) 02:07:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:07:29 executing program 0: getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/150, 0x96) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:29 executing program 2: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4b41bee23a12b1f1) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xbc15}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:29 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:29 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x9}, 0x2402, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) 02:07:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:07:29 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ff5000/0x4000)=nil) [ 1251.508679] loop4: detected capacity change from 0 to 39 02:07:29 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7ade}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1251.565250] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 1251.577891] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1251.599361] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 02:07:29 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x106c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3f, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:29 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:07:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:07:29 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ff5000/0x4000)=nil) 02:07:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffe}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000001c0)=r1) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103001, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x20000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r2, &(0x7f0000000340)=""/162, 0xa2) vmsplice(r4, &(0x7f00000004c0)=[{&(0x7f0000000300)="290617c7a173808e3e9530ec07f64cf5ce281bbf", 0x14}, {&(0x7f0000000400)="ecd929dbdedb54ea000a060e58b330c70da9101cf3851b7a03f375b93ef0454b3593154261626da2b65e5e5d0934a8a1d83bef8175ed1f8c444de049b8a808f1bb7f4eb0420b94c8eeaf228646b6030fad2c37893df5af65da1c22b9cf2c0c156ec35ddc77b70bb372112ec884387385dbb36a6796fbcf15b3cd25c8ca2b112ef77869c8c98167259fdf12179b6e7e97408535ad6073fa4f28456a0514cf", 0x9e}], 0x2, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000200)={0xce, 0x29, 0x1, {0xef, [{{0x8, 0x1, 0x8}, 0x7, 0xda, 0x10, './file0/../file0'}, {{0x40, 0x4, 0x2}, 0x9, 0x8, 0x7, './file0'}, {{0x10, 0x4, 0x2}, 0x200, 0x1, 0x7, './file2'}, {{0x0, 0x0, 0x7}, 0x1, 0x4, 0x7, './file0'}, {{0x4, 0x0, 0x8}, 0x5, 0x1, 0x7, './file1'}, {{0x10, 0x2, 0x7}, 0x2, 0x1, 0x7, './file1'}]}}, 0xce) 02:07:29 executing program 2: open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x901) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x5, 0x400000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000140)) kcmp(0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, r0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:41 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/25) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:41 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ff5000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x803fffc) syz_io_uring_setup(0x6874, &(0x7f0000000000)={0x0, 0x9a34, 0x1, 0x1, 0x23d, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:07:41 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '^\'}][\x02'}], 0xa, "3e28b4df696446b054b91de1de3965e01f9af660e5ddd9fe3f3d90a5f2ecc1b528d01b7092ad3bd8306117d90913"}, 0x40) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:07:41 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:07:41 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x72, 0xc6d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ff7000/0x1000)=nil) shmget(0x3, 0x3000, 0x1000, &(0x7f0000ff9000/0x3000)=nil) 02:07:41 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x8, &(0x7f0000ff5000/0x4000)=nil) 02:07:41 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x48}}, 0x4) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:41 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x6, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES16=0x0, @ANYRES16=r0]) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'user.', 'vfat\x00'}, &(0x7f0000000300)='vfat\x00', 0x5, 0x2) chdir(&(0x7f0000000140)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0xb6, 0x4, 0x0, "0d2b88167d1853e648f96a840fe572bc", "77ced694eca9eee44114de7c9fcea445fc9944c67f6219f5a24a2f33d1b20f8eb95b0dbf589d67087f0854435835c222b700c9604c95d41f48f16976c9601389ed3e92c597008dac16ee22346ac60a707d9f96d9c7da49ccc8bbe7ebeedb31711a312e5c3357b6a5584568b40c0664adb41327b6cf323f0dc55bf99900ec874dc185c79938cc45f1d8f65a1f285e8250604a7f4230c9fb2239d8387676e10f4010"}, 0xb6, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x44443, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r1, &(0x7f0000000340)=""/162, 0xa2) 02:07:41 executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="6aaa96d744a99ba9c1777a5e93b8c77e37b449808358e5e67e18d7b354a1adc06a11ace46b6aca868a582d5e91c32a", 0x2f}, {&(0x7f0000000100)="d07edd9f1abac36f5a92ffa571909b8262c7c4b1a873d08e5c8d9cb0d7b9fd7e34992da747c889b51de83627b37c54057848c9781beb3632bdbe3ef74d17cd97ebad32", 0x43}], 0x2, &(0x7f0000000180)=[@rthdr={{0x98, 0x29, 0x39, {0xff, 0x10, 0x1, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @local, @mcast2]}}}], 0x98}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000280)="e356316ad081bae5f43f3457c198d19ceada1b07f561789b36437bfc2c93ddf61ec87a3633f4ffde11d750bf5d0c2e5525c7923b480ea4a5df0485f3e6d4b996441509b35f2617b3466de744a41cb5b8573c2714543adba1bbdcd5a994e4aeb43141b50b02a804aa0057c08375d419eda0b7b87f50bfe2f083dcd58db4d06d07cfd3f136e47852", 0x87}], 0x1, &(0x7f00000004c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @rthdr={{0xa8, 0x29, 0x39, {0x11, 0x12, 0x0, 0xc8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @mcast2, @private0, @mcast1]}}}, @hopopts={{0x58, 0x29, 0x36, {0x2e, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0xde}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x3}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x33, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x2f, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x81}, @ra, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x5, [0x2, 0x10001, 0x3ff]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x81, [0x0]}}, @jumbo={0xc2, 0x4, 0x4}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x3a, 0x14, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x16}, @loopback, @empty, @rand_addr=' \x01\x00', @loopback]}}}, @rthdr={{0x68, 0x29, 0x39, {0x3c, 0x225d, 0x0, 0x3, 0x0, [@mcast2, @local, @mcast1, @mcast2, @mcast2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r1}}}], 0x2f8}}, {{&(0x7f00000007c0)={0xa, 0x4e20, 0x10000, @remote, 0x80}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000800)="10584dce1d71ac4cf29380f8de5a3cf9ecb52122c8f9ae2dc6", 0x19}, {&(0x7f0000000840)="aeb83392477cfcfd5756f834464f1b7875840007c4db3b8799586ccbf5795122f7", 0x21}, {&(0x7f0000000880)="94e7297951d1ac8a375d8b747a47d07dc45c5209f78d0eafb58bb52b7d4fac659e616b392271376743f732591c1e972985f73e3bf071b52d56cf148197b0dec4df5e787ef85cbd5f84183ba681e601de1d97be55cf0d5dc04a3d80a133a27d4e7f4cf6a128fdfa5c4d25b273e3ccbdc1e4467e8d8c6cbd8bd0ca93ba59482ca61befb1be04cd6f2c8e288c3d47424829a0bd60bcf6767ee920598288c43b2a68ffe61571c68f90a6958b381d6b221c17c0800e9cadcdda0e6fc2d15c026c243c67dea54d6c10f6f57f29849f1c73ec487728699bab26a3fab0dd7351152f2927d6918c2c71f348a372b3fd7b84c146b15d71fa8c66", 0xf5}, {&(0x7f0000000980)="eb0ab1edaf9c08325c04892b29bf947702e3413e", 0x14}], 0x4, &(0x7f0000000a00)=[@hopopts_2292={{0x38, 0x29, 0x36, {0xc, 0x3, '\x00', [@ra={0x5, 0x2, 0x6}, @enc_lim, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x0, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @remote]}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="5b48c0d84c3ec7827eb00dc4e5192fd37a787a6fafa3f653bb247fe39e920bd77b96d0e7e270db12f4cee6f7ad1d2bcbc5fca6bfb3c13ed126a7cf85fe284ce432e0356ee791c2dd38334ceb422776aac667ae4c2eb411c58a", 0x59}], 0x1, &(0x7f0000000b40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x18}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0xfff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x2}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="76bdf371f441a607e13e5607df46e25aa81d8d0ca459ced48a8afb6be015bbc72c9f0777d22eb87cc4e147a32be81c2311ce60b5abfeebea6b6af7fa6d7d7af41228a4c08b341cff33a6fedf7c8d4452c72f96c65c538a5612fc89df2aa2ed4ad50b320ac7baa4e7ba91a57bed362fcc213b29e79b54c8d7c6ae63e5f409f0d7458d4ae8422b5f4de4d7bd65c5263d392a6e36eb257344f5", 0x98}], 0x1, &(0x7f0000000cc0)}}], 0x5, 0x4000) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r2, &(0x7f00000000c0), 0x0, 0x803fffc) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000e40)={'sit0\x00', r1, 0x4, 0x8, 0x80, 0x7, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x700, 0x5, 0x815c}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000f40)={'erspan0\x00', &(0x7f0000000ec0)={'syztnl0\x00', r3, 0x8000, 0x20, 0x7, 0x4ce, {{0x18, 0x4, 0x1, 0x5, 0x60, 0x65, 0x0, 0x9, 0x29, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0xf, 0x5a, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @ssrr={0x89, 0x7, 0x1, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x82, 0x3, 0x1, [{@empty, 0xabb}]}, @lsrr={0x83, 0x1f, 0xe, [@private=0xa010101, @remote, @multicast2, @empty, @broadcast, @broadcast, @broadcast]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) 02:07:41 executing program 4: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:07:41 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4000, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_none}], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@hash}, {@obj_role={'obj_role', 0x3d, '\x86::'}}, {@hash}]}}) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) rmdir(&(0x7f00000000c0)='./file1\x00') getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:07:41 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 02:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:07:53 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:07:53 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) 02:07:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:07:53 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) pwritev(r1, &(0x7f0000000700)=[{&(0x7f0000000180)="6893a5e1515f84999e3f4397e8874ef2421e4fc85c5df0ac8b8e6ffe8b1558cd18f291cde1eaa3e8af1760d72838242fe6a16b0f31fc7e9f12daef564d082f5381a00ff1c16c5d1a263e4b5fe6018a1c3889411874fc53d43884e536e895b599dba9ce15da325f2b2565ca9bbe7462997ded8bcbe915f50e355797dd391f50ba4df297c9960fdfbb99bc40bfc6f619c7d0f6d013465d861328194e85036f5766a32819b76e2a4a5070ad06237038962d4e6eb3f0f568f7a08bde21c25f7eee5cf7d7c0f1590550707fb080a3a7ebb8ee6c63f93310b3bd25171feab70da6f7d17548accebb1bbcf562c4105696", 0xed}, {&(0x7f0000000280)="0c8a8412033c6c30b13959a266b8de767762f85a1b6b9934a4ee2b0f673f0f72db7254d9e47db0386fdf725c81f023e218dc06ed8cea21f57ae452ee0fe33c16a5dfa1892b8250413cc35f46d681bcbdcf4e8c4e799b0cda2ada4321dad5039eea3fcfdbff53892314a344116bc6cb5fc7cf76b3aa8609225bf1277e6133f5d20b83482a5ea3fc2d63801e2c125291130136e25af86d4a8c6a2c1dc1a3", 0x9d}, {&(0x7f0000000400)="cb2d0dc88a9ad3f94d763e7e24109121fb239089076d320d287371a4cbc016f632cd1d6eaa65379b3429327a8fb8fec08064c08dd98ba0064a2709e4c1435cff8b0e53d4d2ae51618020c765dd56ad401fca271f5136c64650cd16d8064ec826ae3ad29cf58299da5bbd059c53a7801ed58394e3a3391ed451ef52b83873b7cfe3d0bc56d5407c8d654a3059ca695e908f8722ee807c28c3b455ee28e97126faee4c1740ba21d5eb711a53261f877f30ecbe42040f78c29ce954a84b87b6c76af2d29399a9680a269fd35843d0", 0xcd}, {&(0x7f0000000500)="318f20203b83ec2863583b2d99b9b80e7d1798d2119a3394b0cbf0b394b9010dc49c502a15028cac45c4574665368178b46c461456760c5c6659836acad2b5146dda1ece34e7b4fa3898d6247faf2dc9ab3c3b05865b426a910daa5a3a815af19f01e2f8a009915c00fec5f0", 0x6c}, {&(0x7f0000000580)="7cad0c30a9a2cf99d55ee205430412fdaaf223d7e9e4b269eb1ec0e08d5bf71e7d36f0de6d7dd84aef609f531a475eb46b4ec7f241c73fd3098861e175d5ead4ce8c88738a4c9bd9a9b272b2b13727d0ae", 0x51}, {&(0x7f0000000600)="165b26b1fb3ee6eed7448257cbf488ba32a13ea23fe29f0dfbcfe0439b429b1bd35b761738af8170eaf596248cbb71d145407ca973d542f60e04652c3fcceb2cae04439daf14cbe2c083dffb9ede8669059eecbc5c08d5b5bc1ebc9cd1eb840424bd3390ae7903b9ff96d1cfa6ed65267cac6543c86fa40b2ec721f351c741bbbfb062503636aa7a5e40cd709f543db61d22be0bc99d7caa41ea4b0ef49921f0e68b8f7e9d5cb88c0b8d2f546674e82c419c9d37f5dd1e2bd742800452b290662816", 0xc2}], 0x6, 0x9, 0x1) 02:07:53 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x1f, 0x1, 0x3f, 0x0, 0x0, 0x14, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xf50, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x400, 0xf883, 0x40000, 0x241bff751c999341, 0x10000, 0x5, 0x101, 0x0, 0xffff, 0x0, 0xfffffffffffffff7}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) 02:07:53 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xce, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x3}, 0x4100, 0x0, 0xfffffffe, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200404, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@version_L}, {@version_L}, {@posixacl}, {@loose}, {@version_9p2000}, {@uname={'uname', 0x3d, '%%'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.%{$}-'}}, {@fowner_gt={'fowner>', 0xee01}}, {@hash}]}}) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffa000/0x1000)=nil) 02:07:53 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x803fffc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x217, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x6, 0x3, 0x2) 02:07:53 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) [ 1276.459925] loop4: detected capacity change from 0 to 39 02:07:54 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xa, &(0x7f0000ff5000/0x4000)=nil) 02:07:54 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b0008400020ecf70100000000", 0x17}, {0x0, 0x0, 0x2800}], 0x40, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat(r1, &(0x7f0000000040)='./file0/file0\x00', 0x600, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:07:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:08:06 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') name_to_handle_at(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@ocfs2={0xc, 0x1, {0xffff, 0xffffff01, 0x1}}, &(0x7f0000000180), 0x400) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f00000001c0)=""/169, 0xa9) 02:08:06 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:08:06 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, 0xffffffffffffffff) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:06 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() getpgid(r1) r2 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x4, 0xec, 0x1b, 0x6, 0x0, 0x100000000, 0x20, 0x1e, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x379}, 0x844, 0x80000001, 0x2, 0x9, 0x80000000, 0x20, 0x1000, 0x0, 0x8, 0x0, 0x401}, r1, 0x6, r0, 0x1) mlock(&(0x7f0000ff3000/0x3000)=nil, 0x3000) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) close_range(r3, r4, 0x2) r5 = getpid() getpgid(r5) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x80, 0x8f, 0x31, 0x40, 0x0, 0xfff, 0x8001, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc1, 0x1, @perf_bp={&(0x7f0000000100), 0x3}, 0x8800, 0xffffffffffffffff, 0x3, 0x4, 0xca, 0x5be, 0x1, 0x0, 0x5, 0x0, 0x1}, r5, 0x4, r2, 0x2) 02:08:06 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r1 = getpgid(0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x8, 0x8, 0x5, 0x0, 0x2, 0x4000, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x4000, 0x400, 0x8, 0x4, 0xf3f, 0x401, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0x5, 0xffffffffffffffff, 0x11) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7f) r3 = fcntl$getown(r2, 0x9) gettid() recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/209, 0xd1}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000e40)=""/148, 0x94}], 0x2}}, {{&(0x7f0000000540), 0x6e, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/64, 0x40}], 0x3, &(0x7f0000000740)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f00000008c0)=""/20, 0x14}, {&(0x7f0000000900)=""/99, 0x63}, {&(0x7f0000000980)=""/175, 0xaf}, {&(0x7f0000000a40)=""/118, 0x76}, {&(0x7f0000000ac0)=""/131, 0x83}], 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="38000000000000000100f4ffffff0000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}], 0x4, 0x23, &(0x7f0000000e00)={0x77359400}) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) kcmp(r3, r4, 0x2, r0, r5) 02:08:06 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mlock2(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0) 02:08:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:08:06 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xb, &(0x7f0000ff5000/0x4000)=nil) 02:08:06 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) munmap(&(0x7f0000ff6000/0x4000)=nil, 0x4000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/184, 0xb8}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/99, 0x63}, {&(0x7f00000004c0)=""/68, 0x44}], 0x6, &(0x7f00000005c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x140}, 0x40010002) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1, 0x8, 0x4, 0x0, 0x0, 0x4, 0x30de, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x48100, 0x5, 0x5, 0x2, 0x9c8, 0x141f, 0xfbff, 0x0, 0x8, 0x0, 0x20}, 0x0, 0x6, r0, 0xa) [ 1288.700100] loop4: detected capacity change from 0 to 39 02:08:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x6, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:08:06 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xc, &(0x7f0000ff5000/0x4000)=nil) 02:08:06 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r1, &(0x7f0000000340)=""/162, 0xa2) 02:08:06 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:06 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:08:06 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaee}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x2}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1289.041840] loop4: detected capacity change from 0 to 39 02:08:06 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = shmget$private(0x0, 0x2000, 0x78000208, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff6000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000080)={0x2, 0xffffffffffffffdd, 0xce, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x51200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x7}, 0x0, 0x400002, 0x0, 0x0, 0xb2c, 0x8001}, 0x0, 0x1000000000000e, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) shmat(r0, &(0x7f0000ff6000/0x1000)=nil, 0x1000) 02:08:06 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0xf, &(0x7f0000ff5000/0x4000)=nil) 02:08:06 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ff7000/0x2000)=nil) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:06 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0xf6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x1000)=nil, 0x1000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:08:06 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000040), 0x0, 0x18000000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x101400, 0x10c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:08:06 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ff6000/0x4000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ff5000/0x2000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mbind(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x5, 0x0, 0x5) 02:08:06 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmat(0x0, &(0x7f0000ff5000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:06 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x8}, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:19 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)={{0x0, 0x4, 0x7f, 0x1c4, 0x2ee, 0x800, 0x20f, 0xfffff801}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1a20) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x2b, 0xdb, 0x4, 0x3f, 0x0, 0xe46f, 0x800, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5a4d, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x2000, 0x74c3, 0xf9b9, 0x0, 0x8001, 0x7f, 0x2, 0x0, 0x1ff, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r1, 0x18) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x20) 02:08:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:08:19 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 02:08:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:08:19 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x10, &(0x7f0000ff5000/0x4000)=nil) 02:08:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe2(&(0x7f0000000040), 0x80000) getdents64(r0, &(0x7f0000000180)=""/143, 0x8f) 02:08:19 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x7, 0x9, 0x4}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x101040, 0x0) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000c40)=0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x2822c11, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@loose}, {@fscache}, {@noextend}, {@msize={'msize', 0x3d, 0x1}}], [{@dont_appraise}, {@fowner_gt={'fowner>', r5}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '#)\xea&{O\']:\'%\''}}, {@smackfshat}, {@pcr={'pcr', 0x3d, 0x19}}, {@fowner_lt={'fowner<', 0xee00}}, {@fowner_lt}]}}) read$hiddev(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x16, 0x20, 0x1f, 0x0, 0x7f, 0x20020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x983, 0x2, @perf_config_ext={0x3, 0x2}, 0x40000, 0xffffffffffffffff, 0x5, 0x3, 0xd5a2, 0x0, 0x500, 0x0, 0x8, 0x0, 0x4}, r0, 0x2, r1, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r6 = getpgrp(0x0) mlock(&(0x7f0000ff6000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xff, 0x5, 0x1, 0xf3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc07, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x40, 0x7ff, 0x0, 0x1, 0xfffffffffffff6eb, 0xfe000000, 0xeb8a, 0x0, 0x1ff, 0x0, 0x3ff65f8f}, r6, 0x7, r1, 0x2) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000140), &(0x7f0000000180)=0x4) mincore(&(0x7f0000ff6000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/107) 02:08:19 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1301.581173] loop4: detected capacity change from 0 to 39 02:08:29 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ff7000/0x3000)=nil) 02:08:29 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3000, 0x7, &(0x7f0000ff3000/0x3000)=nil) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:29 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x80000, &(0x7f0000ff5000/0x4000)=nil) 02:08:29 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000180)="04000000646f7366d8a02b00080101001640002000f801c82fe02b6a189985830205616985f7ce48c1a97f0c789a7418bb76067df0e8634552adfecb62383459493f0c64926035e54136d6a90f7aad0cdae866ab42ec2eac8adeb38a613ee54d16baff9e319dcfa0b22de508ca0ce6260eb5997ab52729c3ba0d2612e5ae880f92", 0x81}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) r2 = epoll_create1(0x0) dup2(r1, r2) 02:08:29 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x0) 02:08:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0xf, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:08:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:08:29 executing program 0: add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1312.247828] loop4: detected capacity change from 0 to 39 02:08:29 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) msync(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x6) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/232, 0xe8, 0x0, &(0x7f0000000200)=""/247, 0xf7}, &(0x7f0000000040)=0x40) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:29 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0xffffffffffffff99, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0xdc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:08:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:08:29 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1cc1318d, 0x2, &(0x7f0000000200)=[{&(0x7f0000000400)="7e41c88a96ab2a4d4ff62da12791538de0c6a9e8cff23cf2ddb3aa709ecbf6af8e543fed0244f3d6e950f8a150c584c1b4ceab99c9da10c5a3ebd50b5f68cae1b83c3418b7368b74be8ea48532b44cb9e26ff7104b12c117fde59cc8bb0fd4deb51d561ce9dd90c900d94076011bbfd989bf26bd0302a80fc5a6b2b1cf7093a7093d10b26cf0ceb345a0a77549fddd291083fd03bb389d0b8ae8235fcf761d5833900d82717e1a7b1fad4d23475a4b57a46f2270835f0d1b4cf00ac07ad2ed77e22c05fa834b53813ecf8925ca04f44bd57efc53789798f1d6fe2b3e5c50f7af7cda7c948743f504f2e7bfecf0bdc0a856fa93c008e8f6160de060cf27fd26dc7973e503574feee0f4f248b6a9fcf79f263e2c528455a201e5a30fbae5f5f6a2d6f30476031a45d85a45e2c140a920e2226f57f3ec0d05e753ef7fd207fdd7aec875f025711bffdc4a5b0ca7a021b9e5cda7866cc156f0fe474471788545f9d5e7455b76341b59952d7a8a8b34a24b0ca80697609993bd033e7dcbac87ed04de61023b09d4e9c1d2fbf1f2f7427ff9927bb829465efc4444bce1ce40e3980afe4d3193e36afb604b38715065725edca54ece0c037d9b95785a7b1649987bf4c7c65cd2e58587ac661592221c6fce1dd7833cac0bb5afa71e60158a1d2627901a48ea30c36661a48c9db4e771abb1f59d63f233cb6ee0d20032dba4388d29274ed2cda707620ecdab9c1cd84170defbcadb4650182ef5f402efafcee044b00b4eb01f3409ede05d69d320f90e67ff1dca026863c45126d253ef218958ea9ac05c293e350bed0b45c8d65000605f061feb584d5507a460b1984f2cd1e5819c63382796311c17eba43ff474e6980ad8d3d99c902d2a69710e3648d7eb29562a52da60e7f49aa48d69a654371f1b710baeb8ad0d9c04e4e5ae65bed1fd525f0d61b2cfb0d0e17dea7003d3616701f52f52ec6d4541dff52b135d30d5390c75473c91c3a4ebf5e00d6596529bf1186457547e86ed1ad5e82d97720dc843f18c0275271593ee19fc8462ecbe078bd31b0351a09d45edecfc046c2e75c114b6e7c80a282d7075a449895bf1ad80feec93d881cbbef43e2a676f29199ca7dd52135e55ddf6e040d463827733d279d598e438fbe1ccad72ada186d23367fe5f565f5eaf99a57efceb07462ac53aae0d7915aa431657bdff3ef3e32153a9371f275e86e2995e3d50ad579341a58b98e37ae2793b8a7654e8b672b9ed89e3042fcb8e007aa9cca0063145ae49697c2b982bd2760d7449b8dae0a7aa74bd96d30a261949ba772e9d320d1fe3c2f8c0cb799d7318f32e59561c91386de8b84844daec47ee053932c8bb76fb4fc140d8bb606eafc154e4985a0585889d11a3141d4779066936b581c2f7eebea9009264ffbf86718695f1df3fda4d1540c81fcd8d486e6c25019ed1312858e85c4fa5a0c6278714c46e58f73973f240df01b66dc4c9976788a0482890dac3b114d63eacbec34c213135d81aa3ecf6830aa0d7495c97fbbf745243ccfd71d90e451270e84f700a0855fb138cd84a6bcbd9465da1dfe79ba33df915e4fec4614cc18fbe6f82798f065950bde0af557fa24c9631555978272aeec7eca9ab5dd596d023c0aadd1296caaccb7c112f6557571801388a058483c592d336b27fc3c8ebed734a0d9634692c383412c583a5d76ed17b112591b0fa3ad7511bc58a73347ddcaddd2c2edde4c51ac7a1ca5ff224e709860a18c3e4b699019bb4cb8cf4a912f24465da3338b985b422e3c31dc6dbd36c0ebf6461521f94d23864a1af21583885439b80358e3d9ebf126fe313111e84fbba7f7ad9d29ccf515531fde22f5400a67553515fdc2defbc0627364366c2f14886e307efb0504e96584b6c09bce87ae5f75edfd430b2ff1115f088b9e96ddd7b748831fd0558d3127d2983027c93f527cbf4dd9fcc7a742508b70a23282bd176da2b654cd58ced5b37479e2083b901197f68aa2af25d6025cf94991c58ff5c68048abf0a3371f57a4670fb0e1a6c9e82dd3ce7987f9a2d09a92af3b1bdb7ac0d401d822cbe92ef0ed2934f1530fc6aaf7706aa080c93747561c76fad40e5ee6a6690e15cf96be540c39342d19038d230720236b1eeb72ca675e56da66c9c5486b0da39e45a51033f2c5081f62ae6be9665cf8addffc538870192babe4159c5203d8be05b22d62ca4f944379e890c6d453b923bdb48825d2335ed8c0268b8f1114a897199d8e297257288e92d31256bf1dbeae3c67621d6e388378a4657d1294204c5eb28439cd801afe722b112d1ca2d20144e59841a1c426b7563f7f4bd72f6de38b8a6373302146d3148e4e6da40a8b587ea2998f6be233352ea8a1707c4a1f1c8c54226b2d2b3699b910af667446ed9edd92f153cc6f08dd348457ae646e4df7e1ccf3323d7261f8e29b8130a783bcbb09ffbbcc4ec40ccb242a594d34801e0cc60233036813b620a72cd83d7b6112b116df4f2c418b0bdd5c3a729e850d469fd08ba34b44a00dd2865316e5789c7d1bd706d4e878a3751f1d427cd99b739a88a613ad8399d89a2c61c2df2bf3673fe6ab9bd3fe7f0f345c3a42ac27015f35053551f91e183f9d8017a80ac7aab367725bda9535d97b90935a5af0805927ab03f4c35e50af40f472ae7ab9e8f576cde85fa7a66e25ceb7092fa33cf97cd84ad9bee21f5536c72746858924bf563e84a309794d426f0093ba474aea7d723c68cbc769a79e78d166fa05ca77391edbbffd19cf5f426c3e8a3f2557b78d3e2b8f60beadf88e94f441911d5c4d96f0e11d8bd1ee84aa748e0de2ab152e4e580536731fc7488aa1f23876bd3c65f95edc8698bf75280905c50d0fb27cbccdf40ba9cea1ba165e83f5e20b9e4dd13c76b2d115095885462bdf32ad1da23e81a65cae453ea2eff3e965dcaa107052438482e4052936dce4caffe5012735d13e1299d04dfc6b3292427b4878894356395a188f6860544d7be88f9df45a7e61c00015b10b00a18fb569cc30a8b2bcf95c69bf7493b1d4bfb1d91f5a102e8290564b094f8bee01d519286552fa830833f3cdd0817e87636a35376a160006ac04a3d07ae72bbc970776b4c639125d1a6d312c9ffb17082ecbc50ca154ef9e7b3789cd4f281ebf9e092cd2772cfc5a3684d420103cd45646ffaa52bbaba7d08ca824c65ec499164551c4cbcb611260e982c248e35da515b956b46ce537672f5eace2436df902fcd1d055343c5ec62061d32104e19a8761931de2cd8cc3268fe5ec45aab4bac2d1fc9ab2b88dc825489ee2d6056307a844fa6f3eb7e620f0d479bd86c3929fba175c4a44f881109c3dff735c9f254ae71d3b97741d4e48a4a2fbd1db36a0a85ff4039f821be65214476153ea6c8d318811d589f868deeb5deb2f9684d004482ab76f58598a634bcbe30dbe83bd8aeffb27c20044186cc19d3d3f3f455302d5c6d070818274d4fa2da80173bf6737ed32f651ccd0e25569837d4d9ac668d7a3efea668f6b160123f36a58643d009b2787b6660c2eeb89705caf972ff1ac6ae9fbb665ac366179f23120f54bfe534b01ce126387c0c56f85a86d5b67050eb1bf150ecd47df85d3df3d219697cbbdf36b02d24c243c83be7b742de7ef115c945249255a21a2e71f2dd072dd8cdd26b8408ca166971f30c670633a66ed4aeb3bd6277f9d750120f06cee3d4a631c635a3b4f2f4f65400a0580d308eabd675848e3fca1339a1b6a0f59d6e28438589e17c5b1b87959bb615e936fc675e30a370ac2602af1d9735e3588fbce3d631b17c4096161844423597f746301c43bc12d8dc8dc666a5442cf60d54ad09368995dd27b362b1dec7a0202c944ac19d173c51832fdd4761726ad22fe2c4066a9f485dd7b55c4aa28588a702152860abebf36502715899b8f24943e840364e38afdc23dd9616f20aae3a0878a08ed35a91c693a66ce6519da4c86fe81d2b2da9c8394f9d8b743da924470eac37db86920550ad6122aa0db68f6a3b0aad5baa2bc0f218968a8802504745e82c6fe6d1b02433bfb5156c2032b62daa1d8d15cbd29362e38d0fbd0d641d1f668678c4cea2ca68a5c5d2820ff94a98c68dba134ec1bc248e2d0458fbf2667a83d25e9cccec9d30d48daa7ae532c12492973dc0ea95bf86d4ea3176a9a3091598f366d658bc436ada77e10cdabc93ca47a0bb2527510daf67874e6180dde719118058846b26eaf49f6326f49ba900850542710b60ff43df106a044d36e7e70058880e94bd6fb8a08ce0822b51d03a2cbd63c0450348e6c3a164b4ed799dfa78155dbc1329428de009804b9e1e0a31fb89ab5221a50e50054567d6d2031facc91f081ff205d90f56b38e9b32dc345a855a4ee2dd61c9620e0325dc890ad0a5480240d5a6ceaa4686a0b852f0e2c5b75fe50c3e7f3a919558e4dc973ba59c3f0d2604a463cb3b237e7dd5defc928a5d7a5c5959922d4a5daa9e56f3f64453c2857f7ecf99913fd68569b3c05afb1520d86d61da8b759abf08b5dd58c0e45726cd8b99cae32ebf43724437612a4dfab5191c66d63a7d8982780d8f69d5032fbd342354d14ad1fec7923da651629a2294880fafee80c7f0afcb70fb7fad893760156f3c3ed96a90a3b38c366db46acd1dca59e744f16bee2134e022f69a6f9305d2240393dd89c05bbf9f2f2b1a92bdcaf0866a0ac549b3d76b08bde2fc7de5aa51281ef513bebc4ba28975451e3376897ff901cd265ca5216d2d69eae6d462bd01876f7642884cbdc710747e7641fd19e930437623df7e866a6437ce44fa91ffbfd7859a12dacc5829fe50c2e9d94965aff64330d10c9475731c09491ba5b7d26b279435e025329a0b0bc10000add4befe902dd97ac55132ef1cf43bc2ab425b0904dd47ab3b99ce7ebeca4978f29b85d0eb19af96b6c121270053f46e8f6a191b9f952aa4dc47f1273edf1279cf4dc883c1de671f0b8d2355bf42ff4d54009c185a6d4cbb6c642184591a7564df4a5bf3acadfc296e2916779ebeac165874e3b5bdbfbe9cadaf59fbabc22fd157035e4c72df29bb2f966fc247ed90abf87ad7db70deee76eb33a777ce2eb27ea67d6bb0939a295513029c5b0c8ec27b051a76e20707958a961445ad4daf943cb60f8e7a6547b57a8b6f0f5e2cc561f7133b762e46ec56a0656d5f90ebafd5ed4e2b8c896a2aa63f212ad19d91d423c508851384b7153535ab1ceb2901b83b2650003c2cba097196a988419e31e84b0bd0531dc13e65d3a7240bd8d3a86ee51e8762a14015435c823dd1f1b25a5506ef1531a8abd58f7c7bd2da409ffdde4f87f8ece57675f92858ef3af2907d32d656cc91d347019077f95fe2128d087f9dfa6374d8097935f9c1562b6dd761b1da5abc0618e78c77912ae8b29c5aaeffe8fa100d8d001c94f93b263028668b14983201143781a14329fab9f629ad69994f2bcd8d02e68a5f5fb5679bff17724edc3cb50692dbecd17393e6b6b6299279432d4922e5d0c94bf90179b74925d0444a04d0bbe1b37ef8253e3ae72eaf8e57e0f4b5dd2cfc9951b1a0533dd8674eceac53d3f97db5a7603d65fc6dcc5b13d6f2563b92040d85843c91dbcc8a1892ec9e0f880d01c39c304cf9e3664f5112b05e8c08ea3c4d04b588b226ab763d0a76b2dfaf872179c6af55364f95fbf0031c3fdf387ae09eee06618910474d5ca847faf53ecb580c0aaad94d8a8a46fd527e33842b8a8f6374da0a3c4a91d22e814442483dbe7ddde7c1e0355a24aa2ba2aa2accf541d703003c0d47", 0x1000, 0xff}, {&(0x7f00000001c0), 0x0, 0x3}], 0x802002, &(0x7f0000000240)={[{@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x77d2}}, {@sysvgroups}, {@nogrpid}, {@abort}, {@user_xattr}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}]}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x8) 02:08:29 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) munmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000) 02:08:29 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="2037f1375c88"}, 0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="2037f1375c88"}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd602ddc2000103a00fe8000000000000000000000000000aafe8000000000000000000000000000aa860090780000000000000000000000006c3ee9f5237c"], 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x100010, r4, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1312.401819] loop4: detected capacity change from 0 to 39 02:08:29 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x57756471, 0x20}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpgid(r1) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x8, 0x6, 0x6, 0x7, 0x0, 0x200, 0x1021, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0xe3, 0x1}, 0x3070, 0x40, 0x3, 0x1, 0x3, 0x10000000, 0x3, 0x0, 0x9, 0x0, 0x3a}, r1, 0xf, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x5, 0x1a001) r4 = getpid() getpgid(r4) rt_tgsigqueueinfo(r4, r2, 0x8, &(0x7f0000000240)={0x3b, 0x5, 0x5}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r5, 0x0, 0x0, 0x87ffffc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="3854000000004859a20fd51eee141e4340f98d01a459127365e8c963b6a2883f353a2edd3deec100319c43d00be6052a6cf6a71d1cae0b7670c8b55b0409fb08379581977040c02eb6b6f3e0462d7914d98d29b4e55d71eb9820d8253e42a385685cb7a0388afcc25060f1a06f682082ed8d1106055d03a19a3bc1899c3e5c2f3e55e36ea24d161dec753a360deb3c60"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x1, 0x40, 0x7, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x2, @perf_config_ext={0x1, 0x7}, 0x400, 0x1, 0x6, 0x4, 0x1, 0x3ff, 0x3ff, 0x0, 0xfffffff9, 0x0, 0x3}, r1, 0xe, r6, 0xb) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x10, 0x81, 0x2, 0x1, 0x0, 0xfffffffffffff800, 0x8000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7fffffff, 0x3}, 0x10422, 0x7, 0x8000, 0x9, 0x5034f992, 0x1f, 0x702f, 0x0, 0xef, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r5, 0x9) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:30 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0xe0, 0x81, 0x0, 0x200, 0x2, 0x3, 0x7, 0x92, 0x40, 0xee, 0x2, 0x8, 0x38, 0x2, 0x7, 0x2, 0xfff}, [{0x0, 0xfc, 0x1, 0x7, 0x1, 0x8001, 0x8}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1778) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) 02:08:30 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() getpgid(r1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x9, 0x5, 0xd5, 0x0, 0xf00, 0x6000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x1, @perf_config_ext={0x200, 0x3}, 0x10000, 0x1f8000, 0x7, 0x0, 0x4, 0x1f, 0xd3a, 0x0, 0x9, 0x0, 0x7}, r1, 0xc, r2, 0xb) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:30 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/50) mmap$perf(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) 02:08:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:08:48 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) sigaltstack(&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000000000)) 02:08:48 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0xf8, 0x5, 0xef, 0x0, 0x1f, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffff1f3, 0x4, @perf_config_ext={0x9, 0x5168}, 0x2828, 0xffff, 0xffffffff, 0x1, 0x10000, 0x0, 0x2, 0x0, 0x3f, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xa, r1, 0x19) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:48 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = getpid() getpgid(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x20, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40000}, r0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:08:48 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xce, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9011, 0xfffffffffffffffc, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/123, 0x7b, 0x1, &(0x7f0000000100)=""/59, 0x3b}, &(0x7f0000000180)=0x40) 02:08:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x803fffc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d9ccc669", @ANYRES16=r1, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r2, &(0x7f0000000340)=""/162, 0xa2) 02:08:48 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x3, 0x3ff}}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010", 0x4c, 0xa00}], 0x0, &(0x7f0000000080)) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000600)={0x5}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r2, 0x4b47, &(0x7f0000000000)={0x0, 0x8001}) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x560d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "5469d64b5c4cc117"}) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000040)) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000003c0)={0x1, 0x3, 0x1000, 0x17, &(0x7f00000001c0)="5b1acac6cd64dac7944edca20400fcdb869d4b2569fb43", 0xba, 0x0, &(0x7f0000000240)="71b2ee8390341693c2ad08dcbcefe734c6b76bfa746b2ae759fe8db0a76895f2aff7e8d085c8b83baf1b49eb2c845e60585add86492931c33a4185416bbb64d7c4f00a5dd93f257158075a8166f19258dbe6f2866e2c5682c3f42de0466d373a309ee4bc6ba58a38b43f8922be3753c6df3a53195b0bffff8ddfb416e6393bc8ea851f14d77ac3738a8aa548c81824c8746359ef9d5b59a712819b751cde53253fbacd443f03e8165c49dcb0d61115804eec939e9a92c358d0d3"}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ff6000/0x2000)=nil) 02:08:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:08:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x300, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:08:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:08:48 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mincore(&(0x7f0000ff8000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/250) 02:08:48 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:08:48 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x74) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000, 0x7fff}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:00 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x20010, r0, 0x98066000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:00 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) shmat(0x0, &(0x7f0000fee000/0xc000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:09:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x500, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:00 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:00 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) shmget(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) 02:09:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) setxattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000180)='vfat\x00', 0x5, 0x2) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:09:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x91, 0x284b}) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1342.640040] syz-executor.4: attempt to access beyond end of device [ 1342.640040] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1342.643165] FAT-fs (loop4): unable to read boot sector 02:09:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x8}], 0x41004, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:09:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000140)=0x101) sendfile(r0, r1, 0x0, 0x1f) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x80800) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0x800000000, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x600, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:00 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) syz_open_pts(r0, 0x0) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x440040, 0x102) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x40a400, 0x100, 0xb}, 0x18) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x208080, 0xa) 02:09:00 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000800000/0x800000)=nil, 0x800000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x1010, r0, 0xcd131000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) munmap(&(0x7f0000f3c000/0x4000)=nil, 0x4000) 02:09:00 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/116, 0x74, 0x5) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) pread64(r1, &(0x7f0000000100)=""/205, 0xcd, 0x9) 02:09:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:09:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) renameat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') 02:09:00 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff5000/0x1000)=nil) 02:09:00 executing program 2: r0 = eventfd(0x7ff) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x3, 0x8}) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r1 = getpid() getpgid(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8498, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/136) [ 1342.985446] syz-executor.4: attempt to access beyond end of device [ 1342.985446] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1342.986214] FAT-fs (loop4): unable to read boot sector 02:09:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x700, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) openat(r1, &(0x7f0000000040)='./file1\x00', 0x400000, 0x9) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) openat(r2, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:09:11 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000005c0), 0x0, &(0x7f0000000640)="93", 0x1, 0xfffffffffffffffd) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) read(r0, &(0x7f0000000000)=""/122, 0x7a) 02:09:11 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x400, r1, 0x0, 0x100, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:11 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) fcntl$setstatus(r1, 0x4, 0x0) 02:09:11 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:11 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x900, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:09:11 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) mbind(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1, 0x3ff, 0x4) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, r0) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) [ 1354.006982] syz-executor.4: attempt to access beyond end of device [ 1354.006982] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1354.008663] FAT-fs (loop4): unable to read boot sector 02:09:11 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x15}, 0x2810, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff5000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/69) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0xb31ac731bf643b6f, 0x0) syz_io_uring_setup(0x53a2, &(0x7f0000000140)={0x0, 0xd3d, 0x0, 0x0, 0x6d, 0x0, r0}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) move_pages(0xffffffffffffffff, 0x6, &(0x7f0000000240)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil], &(0x7f0000000280)=[0xb85a, 0x5], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 02:09:11 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'security.', 'vfat\x00'}) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x140) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 1354.090499] audit: type=1400 audit(1690078151.648:14): avc: denied { read } for pid=8012 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 02:09:11 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x65) r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ff7000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x78000950, &(0x7f0000ca9000/0x3000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:11 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x3, 0x8, 0x1f, 0x0, 0x8, 0x800, 0x89ee5286c00e2d28, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x6, 0x26}, 0x40000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x40, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x1, r0, 0x9) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x4, [0x7, 0x3de0000, 0x3, 0x4, 0x10001, 0x1000]}) 02:09:25 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:09:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:09:25 executing program 2: ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x2) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) r1 = signalfd4(r0, &(0x7f0000000040)={[0x7]}, 0x8, 0x80800) setsockopt(r0, 0x9, 0xfffffff8, &(0x7f0000000100)="72b8a506fbfe355f70eb5b4034fb5ce6381a54917fb64b33d57aabca7f333e20a93e41f58f35504005f33ffce94c6092662faf19bca34a66b5f5157317068d08d9338e9b8eeba4767b5cff902d17afd45da5c4608d2ebe62548d68d879411656e960bb843a6d0d3219d54f9537bf2fc73792f137687485bee45a798583dfa39e14b9ad7220a449e4c4028271468ef40105b6abb3a995c6cc27c6d885e2abc0cd8b4381fb16130b8ef3290840daf34223f48ff25e2270ab8bdfd4ad874acaea0b5ac6fce8f51f65edf712e717bb3194ae1cdaf159d8ce10b8ec49c1c0a4b95b818ca773e0083abbf24abad4188eaa608dfb61fda821", 0xf5) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) mremap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000ff7000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001180)=ANY=[@ANYBLOB="010000000100b5e0de6c000018000000", @ANYRES32=r2, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) read$hiddev(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000002b40)=""/204, 0xcc}, {&(0x7f0000000500)=""/186, 0xba}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000006c0)=""/129, 0x81}], 0x5, &(0x7f0000000800)=""/74, 0x4a}, 0x3}, {{&(0x7f0000000880)=@xdp, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000900)=""/84, 0x54}, {&(0x7f0000000980)=""/34, 0x22}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/184, 0xb8}, {&(0x7f0000000b80)=""/190, 0xbe}, {&(0x7f0000000c40)=""/225, 0xe1}, {&(0x7f0000000d40)=""/133, 0x85}, {&(0x7f0000000e00)=""/53, 0x35}, {&(0x7f0000000e40)=""/65, 0x41}, {&(0x7f0000002840)=""/101, 0x65}], 0xa, &(0x7f0000001000)=""/232, 0xe8}, 0x92b}, {{&(0x7f0000001100)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000011c0)=""/38, 0x26}, 0x14ed}, {{&(0x7f0000001200)=@tipc=@id, 0x80, &(0x7f0000001440)=[{&(0x7f0000001280)=""/12, 0xc}, {&(0x7f00000012c0)=""/108, 0x6c}, {&(0x7f0000000ec0)=""/53, 0x35}, {&(0x7f0000001380)=""/83, 0x53}, {&(0x7f0000001400)=""/56, 0x38}], 0x5, &(0x7f00000014c0)=""/110, 0x6e}, 0x4}, {{&(0x7f0000001540)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000015c0)=""/119, 0x77}, {&(0x7f0000001640)=""/141, 0x8d}, {&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000001800)=""/21, 0x15}, {&(0x7f0000001840)=""/6, 0x6}, {&(0x7f0000001880)=""/99, 0x63}, {&(0x7f0000001900)=""/26, 0x1a}, {&(0x7f0000001940)=""/239, 0xef}], 0x8, &(0x7f0000001ac0)=""/252, 0xfc}, 0x7fff}, {{&(0x7f0000001bc0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000001c40)=""/146, 0x92}, {&(0x7f0000001d00)=""/29, 0x1d}, {&(0x7f0000001d40)=""/248, 0xf8}], 0x3, &(0x7f0000001e80)=""/227, 0xe3}}, {{&(0x7f0000001f80)=@isdn, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002000)=""/145, 0x91}, {&(0x7f00000020c0)=""/226, 0xe2}, {&(0x7f00000021c0)=""/5, 0x5}, {&(0x7f0000002200)=""/104, 0x68}, {&(0x7f0000002280)=""/171, 0xab}, {&(0x7f0000002340)=""/226, 0xe2}, {&(0x7f00000028c0)=""/168, 0xa8}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000ec0)}, {&(0x7f0000002980)=""/104, 0x68}, {&(0x7f0000002a00)=""/90, 0x5a}], 0xb, &(0x7f00000024c0)=""/211, 0xd3}, 0x800}], 0x7, 0x140, &(0x7f0000002780)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000002c80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002d80)=ANY=[@ANYBLOB="80040000150001002cbd7000ffdbdf25ff010000000000000000000000000001ac14142f0000000000000000000000004e2400004e230fea0200202033000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000000200000010000a002abd700026bd700004000000440017000a0000002dbd700028bd70002abd70002dbd700002000000d5040000f8ffffff02000000010000000100000001000000cc05000004000000000000000700000008000c0032f50000e4000600ff020000000000000000000000000001ac1414bb0000000000000000000000004e2000ff4e220007020080802b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x480}, 0x1, 0x0, 0x0, 0x80}, 0x8081) 02:09:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x2000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:25 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff3000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/108) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x3000)=nil) 02:09:25 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) openat(r2, &(0x7f0000000400)='./file1\x00', 0x60200, 0x40) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/196) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file1\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) getdents(r3, &(0x7f0000000280)=""/74, 0x4a) 02:09:25 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r0, 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mremap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000bfe000/0x400000)=nil) 02:09:25 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net\x00') getdents64(r0, &(0x7f0000000100)=""/208, 0xd0) getdents(r0, &(0x7f0000000000)=""/138, 0x8a) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x3, 0x4}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) r3 = open(&(0x7f0000000740)='./file0\x00', 0x101001, 0x0) statx(r3, &(0x7f0000000780)='./file0\x00', 0x400, 0x8, &(0x7f00000007c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'team_slave_0\x00'}) r5 = syz_mount_image$nfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x4, 0x5, &(0x7f0000000540)=[{&(0x7f0000000280)="483e3ca3dc0ce26875ab4ab8a33f66fbd0364e12bb9060a6d800a9f197903582cc6d19ddd4630a22208d9cae15aceca4abac12185f773376941e4645ecd4a390c3bd6a3c9082c2ab411b0e3c2eeb7e2fa9040f8c01a79bcd54cd537b63bf738ac0dc0b87aaa915c3ad395267fe6a007d", 0x70, 0x4}, {&(0x7f0000000300)="e1cecb63a2341689119315bd5c3510b38389ea569e23f3fe8a9e766efc81b4f305265ff8fa41e8ef2ac0f64ed08e3411308b656839b7d4b9e23137a789ce5cfebf980e325d7a6e1aeed4f80f87e64a7fb9f66f365699c59ebdbfcd3a72264b85a78fe36a50c9eda5678d948cbf567cfa5c7dbef3d2b393913bd5a79d93f7070747c70ca3bb9295669de57903ac1c99cc522fa5ce14fcd8050bad2d404868ef47c314f96628ea25bb97df6919baeb24a23bf4484549754268c2ef201f31cf0d51b385406dcd40b9357c7b898f831a7e56b33e3adc262e886d92fbc8bd6239d866467ec310cb658733d576", 0xea, 0x6}, {&(0x7f0000000400)="a543c0114cdf2c9f9722254484e69c2add8a42632d", 0x15, 0x9}, {&(0x7f0000000440)="06ca9f96131b70d5b8ae175006dbea8cac1b30bda920710d19301675acb9028e943980d0b9f73d09fe6b735cb77b9289346ed616a27422c9902906e7bdb8c61e49ff7931aa799d1d29a33a45ff24cf61c79e2d9725430d9e9f4be8b6d2747cb285604a7be6225dc28125ed0321c79cad5f7ad398bf4ba29d7d6bfb12c77ee6fde7eac36aa737ebcc5c1109b404ac6c64a8b5e5130ccab392657a", 0x9a}, {&(0x7f0000000500)="43dbd1987d056129259594c2d967bc735fabc669350ab5f8043f665b4b5b53b0", 0x20, 0x5}], 0x26, &(0x7f0000000680)=ANY=[@ANYBLOB="15d5495d575d79c87465787447757365725f752c636f6f040b7375745f686173682c00a89009bcb77939580f1ac1a7d83fc8c512394133b559605daa5c3fda0d71177a0f6ec671d9b75d9ff8975fbf7abc4504362f07d49e0d73a1c972f53339c3023d90a7073f078c38ee34e147fd0e1bd134b2b4ce5bbc8105717a21b6827be231919dd6862d3452ae276edc8242214d5803374170fd6778714faefa6f982be171aa5efd28855a71374d"]) getdents64(r5, &(0x7f0000000600)=""/27, 0x1b) dup(0xffffffffffffffff) [ 1367.671065] syz-executor.4: attempt to access beyond end of device [ 1367.671065] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1367.681277] FAT-fs (loop4): unable to read boot sector 02:09:25 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff6000/0x4000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:25 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil) 02:09:25 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f0000000000), 0x40004, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:09:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0xdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:25 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xce, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000008, 0x1010, r1, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 02:09:25 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r0 = shmget(0x1, 0x4000, 0x78000000, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ff8000/0x4000)=nil, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = syz_open_procfs(0x0, &(0x7f00000013c0)='totmaps\x00') perf_event_open(&(0x7f0000001340)={0x3, 0x80, 0x8, 0x9, 0x1, 0x5, 0x0, 0x1, 0x10100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x1, @perf_config_ext={0x3, 0x4}, 0x4600, 0xffffffff, 0x0, 0x3, 0x1, 0x9, 0xaad5, 0x0, 0xffffff98, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, r2, 0x3) mremap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff6000/0x2000)=nil) recvmsg$unix(r1, &(0x7f0000001300)={&(0x7f0000000000), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/105, 0x69}, {&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/205, 0xcd}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4}, 0x20) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x5000) 02:09:25 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x410, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf016}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0fcfff6cf78fb7c1f853938ca290f5dfbedbc63916"}}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "3f8af49bad03dd59ed74b205323b13687af28335e4a36bf493295a361907907ba13de8b6f38ac98ff96bb81d50f6c3d4dd671faa11a48f1980a322338939eac9dfc129b6c3c71c5b248fd08b701faa45ffecd393a06159504a0d0fcedc2db23cfc7a5207f4f0c2470055cea541801f8f1b2678c1b588e5691e0f012d0a8c69c5a3b1310c46c4abd0"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "05d4f4f00bf0a3d793a7354c72cbfd38f3b99547"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ID={0x5b, 0x3, "199ace5cb92341c3e15efc4fd98d6d3d8a306aa91b6327aa6b7e8964ed07524f76a408dad628128f92167e83a4b20e74cf1227061ca16972d32307fbf0fd087d649e17f77de38e8d5d5528747d8edf73640de6bbccccde"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0a3919d7de45b91c7c3c0681f5c97a86c7cd31f7"}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5af3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "52f787eda0c8829bca00a2e5189ee55ef149325e9fa848e7091215a57caacd4c896528756c955e65bf69db4a9c71788635d2c43b16ef1c43c7eee62a661ed0b453b0b15317ef689840c9388f5970ee3e22b485e063f105c4b52addc2462f78877e04f7db5c6b7c2ad1fdc9a675cbca93a6d005f1daf920911d1af6a5a4c63262324805f56aae63d9ccc82839854da579caa1bfa45d07d65c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "6d3d0a59096058db0d966490ea495b083798263703f2148d65"}}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x804}, 0x0) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) faccessat2(r0, &(0x7f0000000580)='./file1\x00', 0x80, 0x200) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:39 executing program 7: mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mlock2(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1) r0 = epoll_create(0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xecd1e000) 02:09:39 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="15ee26bcf14ff9f54dbcd9744f7ea6f486cbb0432158d67986d1f0590c1e029ce900a843e872f73faaf25b7edfa91afab80c524834cc6793725af23eca105571f8f9c7a69c9d512b3344ba80679ab88772016329f0b9fc89492b81376bc0c7f490460000004e85b83b1de96747de4fbb20838cf6659969d522a6b83f4cbccd8ce3d91d6ff6802c6884bd478a7840f8f7db4b7865764a8bfb7a6463ffe13974847a91bc971570eb7c07759b1e80bd98e3544a98ac505fd91beed7081e284df091367305d60ed069b372416e91dd0ea3b1a67eb9891b5de4b0d3d51336895dda977eebdc8d1fd37b8871d41a536324ffdd6240f80973908a41f2449756e2ea5966dd419b08cd334484aa8b94"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000ffdbdf250c00000008000b00040000000c000600030000000000000008000300", @ANYRES32=r3, @ANYBLOB="080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="42b7b6772fabad00ee02a2a4bb7aa3a086b969d3d920cb926c4aa56e028b886c71a6be6ae081b93509000000b25942658b970da935422707eb463319c32a7158236b49c26d03f29163d110aaef75c2"], 0x54}, 0x1, 0x0, 0x0, 0x48080}, 0x10) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x180800) mmap$perf(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x113, r8, 0x0) munmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000) 02:09:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r2, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf256d00000008000300", @ANYRES32=r3, @ANYBLOB="0c763a829e0000007700000051ab915a70d219837378"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x801) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r4, &(0x7f0000000340)=""/162, 0xa2) 02:09:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:09:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:39 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff5000/0x4000)=nil) 02:09:39 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c653000"]) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:39 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7, 0x81, 0x0, 0x4, 0x0, 0xc940, 0x100, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0xfffffffffffffffd}, 0x4001, 0x6, 0x3, 0x2, 0x1ff, 0x9, 0x8000, 0x0, 0x8000, 0x0, 0x8}, 0xffffffffffffffff, 0xd, r0, 0x7) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1382.131823] syz-executor.4: attempt to access beyond end of device [ 1382.131823] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1382.146906] FAT-fs (loop4): unable to read boot sector 02:09:39 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x6}, 0x1, 0x0, 0x400, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000240)={&(0x7f0000000180)=""/158, 0x9e, 0x6, 0xfffffffc}) r1 = getpid() getpgid(r1) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x23, 0x81, 0x9, 0x80, 0x0, 0x10001, 0x42400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x41, 0x0, @perf_config_ext={0x5, 0x3}, 0x104, 0x100000001, 0x0, 0x9, 0x8, 0x5, 0x3, 0x0, 0x6}, r1, 0x6, r2, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mincore(&(0x7f0000ff6000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/19) 02:09:39 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:39 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x100000000}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000240)=""/173, 0xad) 02:09:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:39 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:39 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x200000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000100)={{r1}, "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"}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:39 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x7f, 0x9, 0x0, 0x0, 0x5, 0x9000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x508, 0x100000000, 0x8, 0x3, 0x0, 0x101, 0x5, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x8, r1, 0x9) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r2 = getpid() getpgid(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x20, 0x4, 0x0, 0x6, 0x0, 0x3d3d, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0x8000, 0x26, 0x7, 0x1, 0x8001, 0x8, 0x1}, r2, 0x3, r3, 0x3) 02:09:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:09:39 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000180)="c4024d6693d6bcfd8cbabaa4a5e92958df1494502febb08eb69435af0447d97789816e91b7686c66862a4f81e8f054799da82e892e6667e42db69f5381adc9bce5f50243816f075a50ec49447a5be857745326f98bfc1a6b414fa6198095a54e39d50d7e2c7475a580a6488996ea97699def0df21ab04d613e807c9161ed4ee0e2f1ef481861a77dc4f1fac97be9a7b6a05dc042d23f0d0a9af3d9f20e43052b99feb5a450232abe40eb3e2d830ff582788d3d0bdefbc6945775377c96c17f86162c29fd50a990e248a8", 0xca, 0x2) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 1382.445285] syz-executor.4: attempt to access beyond end of device [ 1382.445285] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1382.446087] FAT-fs (loop4): unable to read boot sector 02:09:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:09:57 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:57 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) mmap(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x7, 0x12, r0, 0xb503f000) 02:09:57 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) shmget(0x2, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) fallocate(r0, 0x0, 0x0, 0x401) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, r0, 0x0) mlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:57 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_selinux(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:textrel_shlib_t:s0\x00', 0x25, 0x1) chroot(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) umount2(&(0x7f00000000c0)='./file2\x00', 0x2) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:09:57 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:57 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x211c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) shmget(0x3, 0x2000, 0x2, &(0x7f0000ff5000/0x2000)=nil) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:09:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x34000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1399.499000] loop4: detected capacity change from 0 to 39 [ 1399.510501] FAT-fs (loop4): bogus number of reserved sectors [ 1399.511408] FAT-fs (loop4): Can't find a valid FAT filesystem 02:09:57 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x9, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap$binder(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x400000000000) 02:09:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:09:57 executing program 0: msgsnd(0x0, &(0x7f0000000180)={0x1, "4cf9d4f9cef5a82c754bf44367cf47157522e7666ccb9902f86c83e1d5b1a09e7356c03489cfec9fa45e09e357d5ddb41bdc127b6b994f7d246d81"}, 0x43, 0x800) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ff6000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x65e1, &(0x7f0000000000)={0x0, 0xfa81, 0x20, 0x0, 0xe7}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14071, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff5000/0x2000)=nil) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 02:09:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:09:57 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x20000, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)=""/26, 0x1a}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x40000140) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1f, 0xc0, 0x9, 0x5, 0x0, 0x5, 0x8100, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x400, 0x8000, 0x7fff, 0xa3cf0089f31412c8, 0x3, 0x2, 0x7ff, 0x0, 0x9, 0x0, 0x1}, r0, 0x0, r1, 0x10) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:09:57 executing program 6: stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000180)={[{@size={'size', 0x3d, [0x25]}}, {@uid={'uid', 0x3d, r0}}, {@mode}], [{@euid_lt}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]}) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x2d9c}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000000140)=ANY=[]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x803fffc) renameat2(r2, &(0x7f0000000300)='./file1\x00', r3, &(0x7f0000000400)='./file1\x00', 0x5) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r1, &(0x7f0000000340)=""/162, 0xa2) [ 1399.813803] loop4: detected capacity change from 0 to 39 [ 1399.823328] FAT-fs (loop4): bogus number of reserved sectors [ 1399.824117] FAT-fs (loop4): Can't find a valid FAT filesystem 02:10:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:10:12 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:12 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xc6, 0x6, 0x5, 0x9, 0x0, 0x8, 0x124025, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x8100, 0x5, 0x9, 0x9, 0x6, 0x8, 0x7ff, 0x0, 0x8}, 0x0, 0xf, r0, 0x2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x5d, 0x9, 0x6, 0x0, 0xfff, 0x2, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x8000, 0x5, 0x1, 0x6, 0x1, 0x101, 0x800, 0x0, 0x5, 0x0, 0x1}, r1, 0xc, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 02:10:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x400300, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:10:12 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) fcntl$getflags(r0, 0x1) 02:10:12 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 02:10:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00|', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000180100002800c000180080001009f000000"], 0x28}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@rand_addr=0x64010102, @empty, r4}, 0xc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@rand_addr=0x64010102, @empty, r6}, 0xc) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x100, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x895}, 0x4000) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r7, 0x0, r3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'wg0\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:12 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x80000, 0x4}, 0x18) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x60, 0x3) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) [ 1414.712570] syz_tun: entered promiscuous mode [ 1414.717615] loop4: detected capacity change from 0 to 39 [ 1414.729438] syz_tun: left promiscuous mode [ 1414.736543] FAT-fs (loop4): bogus number of reserved sectors [ 1414.737539] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1414.744377] syz_tun: entered promiscuous mode 02:10:12 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x100) r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:selinux_config_t:s0\x00', 0x26, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) [ 1414.754388] syz_tun: left promiscuous mode 02:10:12 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:12 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x5, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff5000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:10:12 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:12 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:12 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:12 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fsync(r0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:10:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:10:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:10:12 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r0 = shmget$private(0x0, 0x2000, 0x78000208, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:12 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0xfffffffffffffc00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) finit_module(r0, &(0x7f0000000180)='v)[.&\xbf&^^\x00', 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000200)=0x28) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x20, 0xfc, 0x7, 0x80, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x80000001, 0x4}, 0x18020, 0x9, 0x4, 0x9, 0x7fff, 0x315, 0x2, 0x0, 0x6, 0x0, 0xbc76}, 0xffffffffffffffff, 0x9, r0, 0x3) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3f, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8004, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc0e2, 0x2, @perf_config_ext={0x5, 0x20}, 0x18100, 0x4, 0x25, 0x1, 0xc692, 0xc, 0x2, 0x0, 0x4040000, 0x0, 0x200}, 0xffffffffffffffff, 0x7, r0, 0x8) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) [ 1415.044801] loop4: detected capacity change from 0 to 39 [ 1415.056331] FAT-fs (loop4): bogus number of reserved sectors [ 1415.056739] FAT-fs (loop4): Can't find a valid FAT filesystem 02:10:29 executing program 5: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x7, 0x80) dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000380)={{r1}, r3, 0x1c, @inherit={0x60, &(0x7f0000000300)={0x1, 0x3, 0x0, 0x0, {0x0, 0x80000001, 0x9, 0x0, 0x81}, [0x5, 0x9, 0x0]}}, @subvolid=0x80}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) shmget(0x1, 0x4000, 0x100, &(0x7f0000ff5000/0x4000)=nil) 02:10:29 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 02:10:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:10:29 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ff2000/0x4000)=nil) mlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:29 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="f550d954"]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x171042, 0x122) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x49, 0x5, 0x8, "44b7ffcfbac4987daf090389c2151990", "141c4199b0685ddecbafc4073dae38d268c5d8655f455ba15d41835b505008f9541f6d405feb499194de4a0e2fb4e35c249dfeba"}, 0x49, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) pwritev(r1, 0xfffffffffffffffc, 0x0, 0x9, 0xfffff8a2) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:10:29 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x1, 0x0, 0x8, 0xff, 0x0, 0x8, 0x80418, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x1a401, 0x2, 0x1, 0x0, 0x3, 0x100, 0x0, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mremap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) 02:10:29 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x1e, 0x20, 0x1, 0x0, 0x58, 0x20440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x5, @perf_bp={&(0x7f0000000000), 0x7}, 0x8000, 0x1f, 0x4194, 0x0, 0x8, 0x800, 0x1, 0x0, 0xe51, 0x0, 0x6}, 0xffffffffffffffff, 0xa, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) [ 1432.221870] loop4: detected capacity change from 0 to 39 [ 1432.236692] FAT-fs (loop4): bogus number of reserved sectors [ 1432.237501] FAT-fs (loop4): Can't find a valid FAT filesystem 02:10:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:10:29 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x2, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmget(0x0, 0x2000, 0x20, &(0x7f0000ff7000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x80000000, 0x7, 0x1) 02:10:46 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffd71, 0xce, 0x0, 0xff, 0x0, 0x0, 0x0, 0x89ac2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x720, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x2000, 0x78000208, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff5000/0x4000)=nil, 0x7800) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:10:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:10:46 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x33}, 0x404, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, r0) pkey_mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2, r0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:46 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010004000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) getdents64(r2, &(0x7f0000000180)=""/76, 0x4c) 02:10:46 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda564ade8db0a812, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:46 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x100, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x105c00, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:46 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil], &(0x7f0000000040)=[0x0, 0x3, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1449.449048] loop4: detected capacity change from 0 to 39 [ 1449.469434] FAT-fs (loop4): bogus number of reserved sectors [ 1449.470187] FAT-fs (loop4): Can't find a valid FAT filesystem 02:10:47 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = shmget$private(0x0, 0x2000, 0x78000208, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ff8000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:10:47 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x121142, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2) getdents64(r0, &(0x7f0000000340)=""/162, 0xa2) 02:10:47 executing program 0: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7b, 0x0, 0x3, 0x1, 0x0, 0x6, 0x14, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x52c, 0x2, @perf_config_ext={0xfffffffffffffbff, 0x7fff}, 0x2002, 0xff, 0x4900000, 0x3, 0xffff, 0x9, 0x81, 0x0, 0x2, 0x0, 0xd4c7}, 0x0, 0xc, r0, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/65, 0x41}, {&(0x7f0000000500)=""/238, 0xee}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/245, 0xf5}], 0xa, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x88}, 0x40008160) move_pages(r1, 0x2, &(0x7f0000000980)=[&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) 02:10:47 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x440400, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x110, r0, 0x82c69000) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffcea, 0xce, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x40000, 0x3ff, 0xfffffffd, 0x0, 0x401, 0x9}, r1, 0xfffffffffffffffd, r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) fchmod(r2, 0x83) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 02:10:47 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0xffffffff, 0x400, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) 02:10:47 executing program 7: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) dup(r0) 02:10:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 02:10:47 executing program 2: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 02:10:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x27ff}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) 02:10:47 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40000, 0x101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xb) pwrite64(r1, &(0x7f00000000c0), 0x0, 0x803fffc) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = epoll_create(0x5b) ftruncate(r3, 0x5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r4, 0x0, 0x0, 0x87ffffc) r5 = getgid() r6 = getgid() setresgid(r5, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x10004, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@version_L}, {@privport}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@version_u}, {@access_uid={'access', 0x3d, 0xee01}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@access_uid={'access', 0x3d, 0xee00}}, {@loose}, {@afid={'afid', 0x3d, 0xfff}}, {@privport}], [{@smackfstransmute}]}}) 02:10:47 executing program 1: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r0 = shmget$private(0x0, 0x2000, 0x78000208, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff5000/0x4000)=nil) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/virtio', 0x64142, 0xa1) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x7, 0x6, 0x0, 0x0, 0x4, 0x10000, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x601, 0xfffffffffffff001, 0xff, 0x9, 0x9, 0xfffffffb, 0x5, 0x0, 0x5f, 0x0, 0x9}, 0x0, 0x7, r1, 0x2) r2 = shmget$private(0x0, 0x2000, 0x78000208, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ff5000/0x1000)=nil, 0x1000) 02:10:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x28, r1, 0x17, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 1449.775162] loop4: detected capacity change from 0 to 39 [ 1449.790465] FAT-fs (loop4): bogus number of reserved sectors [ 1449.790857] FAT-fs (loop4): Can't find a valid FAT filesystem VM DIAGNOSIS: 02:15:49 Registers: info registers vcpu 0 RAX=00000000007205c1 RBX=0000000000000000 RCX=ffffffff84544bbe RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8128e0c5 RBP=dffffc0000000000 RSP=ffffffff85407e10 R8 =0000000000000001 R9 =ffffed100d9c6a00 R10=ffff88806ce35003 R11=0000000000000001 R12=ffffffff85d44c10 R13=1ffffffff0a80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84545b4f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2260112000 CR3=0000000017f5a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=e7f3fb629fae7f35a0a375cffcdea8dd XMM02=eeb9c07d13fd08ccb231fdb63b43cbcf XMM03=dd54f19ee7fb5ea37e09fc85f2d7d73f XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=14a1977726c274000000030000005e0a XMM09=d69fdbea73ee79fe57f3c6eb9fd09a64 XMM10=da3fdd54f19ee7fb5ea37e09fc85f2d7 XMM11=cbcff929a27eb9fe7194a6567ff2a6e1 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000008d4dab RBX=0000000000000001 RCX=ffffffff84544bbe RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8128e0c5 RBP=dffffc0000000000 RSP=ffff888008e0fe70 R8 =0000000000000001 R9 =ffffed100d9e6a00 R10=ffff88806cf35003 R11=0000000000000001 R12=ffffffff85d44c10 R13=1ffff110011c1fd3 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84545b4f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2260141000 CR3=000000000e782000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041891386c0000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000