, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0xf000000000000000) [ 425.709105][ T3400] loop4: detected capacity change from 0 to 87 [ 425.713001][ T3406] loop5: detected capacity change from 0 to 87 [ 425.720091][ T3403] loop0: detected capacity change from 0 to 87 [ 425.731933][ T3408] loop2: detected capacity change from 0 to 87 [ 425.906227][ T3359] loop1: detected capacity change from 0 to 150 03:17:40 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) openat(r0, &(0x7f0000001600)='./bus\x00', 0x20001, 0x104) recvmsg$unix(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x7, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0xabfdd62c7f3ac120) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffa) 03:17:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0xfcffffffffff0700) 03:17:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x20200) dup(r5) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r6, 0xffffffffffffffff, 0x0, 0x80000007) 03:17:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x20200) dup(r5) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 426.076839][ T3446] loop4: detected capacity change from 0 to 87 [ 426.091492][ T3453] loop0: detected capacity change from 0 to 87 [ 426.096810][ T3458] loop1: detected capacity change from 0 to 87 [ 426.117709][ T3454] loop2: detected capacity change from 0 to 87 [ 426.126461][ T3459] loop5: detected capacity change from 0 to 87 03:17:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x20200) dup(r5) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1902000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:40 executing program 1: r0 = semget(0x0, 0x4, 0x628) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000180)=""/197) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:17:40 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r0, r1, &(0x7f0000000100)=0x8, 0x401) sendfile(r3, r4, 0x0, 0x80000007) 03:17:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0xff2f000000000000) 03:17:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x20200) dup(r5) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r6, 0xffffffffffffffff, 0x0, 0x80000007) 03:17:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1944ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5601000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 426.268305][ T3496] loop4: detected capacity change from 0 to 87 [ 426.296463][ T3511] loop2: detected capacity change from 0 to 87 [ 426.306773][ T3484] loop5: detected capacity change from 0 to 87 03:17:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x20200) dup(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(0xffffffffffffffff, r6, 0x0, 0x80000007) [ 426.314112][ T3502] loop0: detected capacity change from 0 to 87 [ 426.323377][ T3516] loop1: detected capacity change from 0 to 87 03:17:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x20200) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 426.407573][ T3541] loop2: detected capacity change from 0 to 87 [ 426.469076][ T3554] loop4: detected capacity change from 0 to 87 03:17:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="c451932d2539f9c5c1f719a8954cc0ff20f649e873057471a49f0b1e7360e58f48f04af376dddce32f76bdbcb038fc4207e4511f401da74777733e84011a94e293662318c52cc7f6f9a435ee5ab2eea3608b287cdec1fb94660d13355d1bd718294688825a4ee4d3e298ff3000e8a7e29f04b7db81102f3550e74ab1becdc8690a59d1a604a12fcf5e2fc21d4a66096d599d4caa8c5b7390493d821d0ad777161a2314ff22a7b81aaed938f9", 0xac, 0x5}, {&(0x7f00000001c0)="5264f896942478678373b0c1db7ca9e1870232dcdf6f8189c7c50c07e0d75a580593ddb65863ab66c577d20942487d42b24ea96050eccf5b526a0a84f5585a449691ed6a2cd0ef445a9eb4930252aea59761a51957b6891146e5550232d937ebde9a96b92e408ea816e02d06d1075f70a8d56f415f930be7419a42111656b8e47879398ef299b7852c5c892cd3783501fa3fe33f399e4aed75", 0x99, 0x7fffffff}, {&(0x7f0000000280)="decee3f7240b603991af04e39ed4f323a83c7e1b775f1236790604b20abdff2b5165837625c37b12151ec4f4b7ca6613f5fddc2a280c6d7d666ad4db9dfd013930b0e986190e89d68b8227d40f135ad90047de647db5109297dfcbcf0ea240efbc2daeec7cf8398870ec401d9c919baeebac3bb75e312eae1f205a6608f3cea26d85660fb98b16de72eac345cb7b36aed4d90e6d12fd5d1bb45d793fec0bacdcb49034f727bdf5b3bf77f9e2bb7326c38c8dd6f671fb9f3c51c3b082e577afa2f5766e1daaf3d1976db42ec1a84b4ab38ccdac969a0bd73e45f68fc962", 0xdd, 0x3ce9}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0xffffffff00000000) 03:17:41 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x20200) dup(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(0xffffffffffffffff, r6, 0x0, 0x80000007) 03:17:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(0xffffffffffffffff, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000017010005002e2f6475737a4976cd80cd4b90a5a203b0d9d12e7b58e44e9e685d439cdf92c4887a6014d7ebd483f15f31ad41eb52e33a85dffcd40e4e2a79642bda28191f516333daa1232f2393b5a6"], 0xe) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) lseek(r1, 0x1200, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x927652ef79dfafa6, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x1) sendfile(r1, r5, 0x0, 0x8400fffffffa) 03:17:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:41 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa202000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 427.249234][ T3574] loop2: detected capacity change from 0 to 87 [ 427.254613][ T3575] loop0: detected capacity change from 0 to 264192 [ 427.264451][ T3584] loop4: detected capacity change from 0 to 87 [ 427.271346][ T3582] loop5: detected capacity change from 0 to 87 [ 427.281759][ T3575] FAT-fs (loop0): invalid media value (0x20) [ 427.287765][ T3575] FAT-fs (loop0): Can't find a valid FAT filesystem 03:17:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x20200) dup(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(0xffffffffffffffff, r6, 0x0, 0x80000007) 03:17:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) fsmount(r1, 0x1, 0xbc) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:41 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0xffffffffffffffef) [ 427.336827][ T3599] loop1: detected capacity change from 0 to 87 03:17:41 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf402000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 427.437845][ T3626] loop5: detected capacity change from 0 to 87 [ 427.444616][ T3627] loop2: detected capacity change from 0 to 87 [ 427.448997][ T3629] loop4: detected capacity change from 0 to 87 [ 428.083185][ T3575] loop0: detected capacity change from 0 to 264192 [ 428.093410][ T3575] FAT-fs (loop0): Unrecognized mount option "./bus" or missing value 03:17:42 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64=r0]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80000007) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) r6 = openat$incfs(r2, &(0x7f0000000200)='.log\x00', 0x6609c3, 0x82) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x70, 0x3, 0x7, 0x36, 0x0, 0x6, 0x800, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x100, 0x101, 0x7, 0x2, 0x100000001, 0x7, 0x3f, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x9, r6, 0x2) 03:17:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x20200) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r5, r6, 0x0, 0x80000007) 03:17:42 executing program 0: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000180)=0x2, 0x4) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x106880, 0x80) sendfile(r1, r2, 0x0, 0xfffffffffffffff8) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) ftruncate(r0, 0x1) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000340)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000380)) lseek(r0, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x4) creat(&(0x7f0000000100)='./file1\x00', 0x20) openat(r4, &(0x7f00000001c0)='./bus\x00', 0x482c80, 0xc5) sendfile(r5, r6, 0x0, 0x80000007) 03:17:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 428.326213][ T3668] loop4: detected capacity change from 0 to 87 [ 428.337834][ T3669] loop5: detected capacity change from 0 to 87 [ 428.351002][ T3674] loop2: detected capacity change from 0 to 87 [ 428.358713][ T3668] handle_bad_sector: 22 callbacks suppressed [ 428.358728][ T3668] attempt to access beyond end of device [ 428.358728][ T3668] loop4: rw=2049, want=230, limit=87 03:17:42 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:42 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000300)={0xa, 0x4, {0x2, @struct={0x4bc, 0x3}, 0x0, 0x8, 0x2, 0x8, 0x1, 0x7ff, 0x0, @usage=0x2, 0x2, 0xfffffffa, [0xffffffffffff61b5, 0x9, 0x101, 0x3, 0x4a4c, 0x39a]}, {0xffff, @struct={0x2ab5, 0xffffffff}, 0x0, 0xffffffffffffffff, 0x27c, 0x3, 0xfffffffffffffeff, 0xb93, 0x53, @usage=0x1, 0x4, 0xd0f2, [0x9, 0x0, 0x80000001, 0xffffffff80000001, 0x0, 0x6]}, {0x81, @usage, 0x0, 0x4, 0x6, 0x8, 0x9, 0x80000001, 0x48, @struct={0x0, 0x2d57b783}, 0x9, 0x2, [0xdc6, 0x5, 0x5, 0x2, 0xfff]}, {0x0, 0x20}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={r0, 0x4, 0x9, 0x1}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./bus\x00') write$P9_RWALK(r1, &(0x7f00000001c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) [ 428.398959][ T3674] attempt to access beyond end of device [ 428.398959][ T3674] loop2: rw=2049, want=230, limit=87 [ 428.423717][ T3688] loop1: detected capacity change from 0 to 87 03:17:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) fchmodat(r2, &(0x7f0000000180)='./file1\x00', 0x106) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = fsmount(r1, 0x1, 0xbc) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r5, r6, 0x0, 0x80000007) 03:17:42 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 428.447727][ T3688] FAT-fs (loop1): Unrecognized mount option "000000000000000000030xffffffffffffffff" or missing value 03:17:42 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 428.508907][ T3706] loop5: detected capacity change from 0 to 87 [ 428.521210][ T3712] loop4: detected capacity change from 0 to 87 03:17:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000100)='./file1\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x100, 0x0, 0x3, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x20000, 0x1) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) mmap$perf(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x4815) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 428.561907][ T3724] loop2: detected capacity change from 0 to 87 [ 428.581977][ T3712] attempt to access beyond end of device [ 428.581977][ T3712] loop4: rw=2049, want=230, limit=87 [ 428.630556][ T3724] attempt to access beyond end of device [ 428.630556][ T3724] loop2: rw=2049, want=230, limit=87 [ 428.664428][ T3741] loop5: detected capacity change from 0 to 87 [ 428.701970][ T3740] loop0: detected capacity change from 0 to 87 [ 428.776220][ T3740] attempt to access beyond end of device [ 428.776220][ T3740] loop0: rw=2049, want=230, limit=87 [ 429.291856][ T3688] loop1: detected capacity change from 0 to 87 [ 429.298836][ T3688] FAT-fs (loop1): Unrecognized mount option "000000000000000000030xffffffffffffffff" or missing value 03:17:45 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x0, 0xc9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000100)={0x2, 0x1, 0x20, 0xc, 0xdb, &(0x7f0000000300)="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"}) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x5) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x8, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000200)={@desc={0x1, 0x0, @desc2}}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x9) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x44) openat(r0, &(0x7f0000000180)='./file1\x00', 0x501000, 0x100) sendfile(r3, r4, 0x0, 0x8400fffffffa) 03:17:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) fchmodat(r2, &(0x7f0000000180)='./file1\x00', 0x106) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000300)='./file1\x00', 0x4000000000aea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="a15c940f38aed765a40314c948227f10b1308f4b32ebb98bdfb8bbc9d49fbb31e4d954872eae0c48a0d359fcc25e93acea26dec67924d680c899441e5edf990ebbfbd47e49506d8895c5fc094143e66ad4e1440361d297b88ce491b052489231c89a507b78a9a7378b7632d0fd"]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) fsetxattr$security_evm(r1, &(0x7f0000000100), &(0x7f0000000180)=@v2={0x5, 0x0, 0x4, 0xd1, 0x9c, "84ee4094daf5311627b7fe2caf23cb61b5d87f72ad4c2587425c675e6b4f0dd524a65bd68ee6bd957076f1d53aa13197d640b0df197e765704a613dbaab3d576730276644dd19b602e19b4629cfd277d2e0d0e8db3c1cf99bb24df8d053347f0680b44907f3b3627621aee04558e10e01c8cef3342757f49951e3e60919bc16a002608d8b7316327f025fca50a6bff8b9f95e7cb3b806d0566fa722d"}, 0xa5, 0x1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) fsmount(r1, 0x1, 0xbc) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r4, r5, 0x0, 0x80000007) 03:17:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000019c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002440)={{}, r1, 0x1a, @unused=[0xa42, 0xff80000000000000, 0xb5, 0xeb2], @name="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"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000003440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f00000014c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x0e\xc3\xfa\xd1x}\xea\xe3\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f\xd2l9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05\x8e\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ\x00\x00\x00\x00\xec\xd9\xd9\xf0\xd5)\x815a\xcc{#\xc5\xfb\xc5m\xb1\x87f\xeb\xff\x02\x1e3\xdb\xbf\x82\x0f\f\xc9)\x99\x15\x85su]\x18\xde\xe6.\xc0J#ZI\xbb\xf3\xcf\xd7\x90\xe1l\xac\xad\xd5gy\xb9q<\xe0\'w\xca%\xf7\x7f5\xcc\x1a\xe1\xc7\xc0\xe1\x81\xa4\xa3\xca\xb3e\xb0\x18\x8c\xc3\x8flB\x0f\xd8Y.\xef\xbb\x18O\xc8$en\xc0\x1c\xa6,\a\xc3\xbb\xce\x8e{\xba.Y\xfcr\x8b\x01\xe8l_$x5)\x05\xbe\xeb8\xc7>\xaf\xf6*\xbb\xc4gE\xb2\x98\x9e]i8\x98k\xc6O\xdf\xb2\xedd$\x1f\xec\x01\xb8\x18\xb2uCh\x81\xbcKY \xad\xda\xc8\x10\xae\xdf\xbd\x9b\xfc\xf8\x8c\x1d\xce\xcb\xff\xee\xea\xcf?\xa0\xdeB@\xa8\xbd\x9a6\xc5U\ns\x93') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{r2}, 0x0, 0x0, @inherit={0x80, &(0x7f00000017c0)={0x0, 0x7, 0xfffffffffffffffe, 0x200, {0x24, 0xffffffffffff1df5, 0x40, 0x6, 0x9c}, [0x3, 0x9, 0x39, 0x4, 0x0, 0x4, 0x10000]}}, @devid=r3}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={r3, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={r3, 0xfff, 0x2, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={r3, "896da02cdcc2be8cbf34c7c63eeda05f"}) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:17:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 431.334273][ T3782] loop4: detected capacity change from 0 to 87 [ 431.340844][ T3779] loop2: detected capacity change from 0 to 87 [ 431.343127][ T3786] loop5: detected capacity change from 0 to 87 [ 431.353214][ T3780] loop0: detected capacity change from 0 to 264192 [ 431.355094][ T3780] FAT-fs (loop0): Unrecognized mount option "\8eH"0K2빋߸ԟ1T. HY^&y$րșD^ߙ~IPm ACjDaҗ䑰RH1ȚP{x7v2" or missing value 03:17:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 431.391347][ T3782] attempt to access beyond end of device [ 431.391347][ T3782] loop4: rw=2049, want=230, limit=87 [ 431.433560][ T3779] attempt to access beyond end of device [ 431.433560][ T3779] loop2: rw=2049, want=230, limit=87 [ 431.444304][ C1] sd 0:0:1:0: tag#714 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 431.454091][ C1] sd 0:0:1:0: tag#714 CDB: opcode=0xe5 (vendor) [ 431.460431][ C1] sd 0:0:1:0: tag#714 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 431.469369][ C1] sd 0:0:1:0: tag#714 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 431.478349][ C1] sd 0:0:1:0: tag#714 CDB[20]: ba 03:17:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) fchmodat(r2, &(0x7f0000000180)='./file1\x00', 0x106) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) fchmodat(r3, &(0x7f0000000180)='./file1\x00', 0x106) sendfile(r0, r1, 0x0, 0x8400fffffffa) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r4, r5, 0x0, 0x80000007) [ 431.499045][ T3807] loop1: detected capacity change from 0 to 87 03:17:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x80) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:17:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 431.576969][ T3830] loop4: detected capacity change from 0 to 87 [ 431.608679][ T3830] attempt to access beyond end of device [ 431.608679][ T3830] loop4: rw=2049, want=230, limit=87 [ 431.615234][ T3846] loop2: detected capacity change from 0 to 87 03:17:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)={'syz1', "aa7572461e090ffaf1928958757a49af211939fd3823bce5c3fbf216f29f85a547f78f071f26a4c1044ccefb24c5281003ef50b0b7f424f0f02eea4970abe7134e1d097689df07e6965831f96882ab6ca563654b720ebc86220dc03f0e2a264694eea57aa19bf49503f0f52718b2641f569ac938c955aff1"}, 0x7c) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 431.650970][ T3848] loop1: detected capacity change from 0 to 87 [ 431.695219][ T3846] attempt to access beyond end of device [ 431.695219][ T3846] loop2: rw=2049, want=230, limit=87 [ 431.742440][ T3864] loop5: detected capacity change from 0 to 87 [ 432.162300][ T3780] loop0: detected capacity change from 0 to 264192 [ 432.169669][ T3780] FAT-fs (loop0): Unrecognized mount option "\8eH"0K2빋߸ԟ1T. HY^&y$րșD^ߙ~IPm ACjDaҗ䑰RH1ȚP{x7v2" or missing value 03:17:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ftruncate(r1, 0x10000008) lseek(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) open(&(0x7f0000000100)='./file1\x00', 0x2800, 0x100) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x9, 0x2, 0x6d, 0x3f, @time={0x2, 0x2}, {0x1f, 0x5f}, {0x80}, @addr={0x1, 0x8}}, {0x9, 0x81, 0x2, 0x5, @time={0x100, 0x2}, {0x7f, 0x1f}, {0x2, 0x80}, @raw8={"00188dd46542254b905bc192"}}, {0x20, 0xfb, 0xd5, 0x80, @tick=0x7, {0x40, 0xa4}, {0xff, 0x1f}, @quote={{0x7f, 0x80}, 0x9, &(0x7f00000001c0)={0x3, 0xf1, 0x1, 0x6, @time={0xfa, 0x424a}, {0x20, 0xb4}, {0x1, 0x7}, @raw32={[0x4, 0x57, 0xa]}}}}], 0x54) 03:17:46 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) fchmodat(r2, &(0x7f0000000180)='./file1\x00', 0x106) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) 03:17:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xe4, 0xe0, 0xe4, 0x80, 0x0, 0xfffffffffffffff9, 0x40, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x8}, 0x30, 0x100000001, 0x1f, 0x8, 0xfffffffffffffffc, 0x1000, 0x499, 0x0, 0x1, 0x0, 0xd35}, r1, 0x9, 0xffffffffffffffff, 0x1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x1d, &(0x7f0000000200)={0x16, 0x8, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:17:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x2, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:17:46 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 432.254515][ T3895] loop2: detected capacity change from 0 to 87 [ 432.263815][ T3896] FAT-fs (loop5): bogus number of reserved sectors [ 432.270535][ T3896] FAT-fs (loop5): Can't find a valid FAT filesystem [ 432.292725][ T3905] loop0: detected capacity change from 0 to 87 03:17:46 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 432.302699][ T3906] loop1: detected capacity change from 0 to 87 [ 432.304799][ T3895] attempt to access beyond end of device [ 432.304799][ T3895] loop2: rw=2049, want=230, limit=87 [ 432.323888][ T3911] loop4: detected capacity change from 0 to 87 [ 432.341976][ T3896] FAT-fs (loop5): Unrecognized mount option "" or missing value 03:17:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) r3 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x1, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="8b4bfb13388c1a04fde48b23370c5d8e60135f3311ce014534be13e9b41f8affd518502e10646ef0141ed5abe6b13b2a31a14c2a92265161e15e77193f24d51295cd00f1599dd58830c85a0970c22da87e40e87160532143622d0b6a2dacf3dd5b1e0697d8a83c0ec7faa4cc44c67c77152496c3aa136d3b6716f560d154abf44fced78c0ca24ee29c4199a0f51049c7319b6c24dd0d601494c2e7e0264005711da2987be31683cd62572bfcfbe9678ec5be105cd7710734021fbd431bd64899dc5dc1c54a70b8c98d7f3636efe297c3468b346fce5c442dd237798a768dcc", 0xdf, 0x2}, {&(0x7f0000000300)="847c9cc0b1461c50bf5fc2fb727acab0be0a4be6cf6c133662e54148272ab64e578d5dc435aab6a0a7cd44bce9a8f4efa87563aaef082eabdc702ec4739f60f86a19ddf932cc4aaf854671aaf1b034ecee10", 0x52, 0x9}], 0x200000, &(0x7f00000004c0)=ANY=[@ANYBLOB=',msdos\x00,msdos\x00,sdos\x00,fscontext=sysadm_u,fowner=\x00'/57, @ANYRESDEC=r2, @ANYBLOB=',\x00']) lseek(r3, 0x1203, 0x1) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 03:17:46 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) copy_file_range(r0, &(0x7f00000002c0)=0x1, r1, &(0x7f0000000300)=0x7, 0x1ec, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000240)=[{&(0x7f0000000280)="040005090000000066617400040409000200027400f801", 0x17, 0x20}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000140)='./bus\x00', 0x24) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r2, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200)={0x2, 0x800, 0xfffffffd, 0x39, 0xfff}, 0x14) write$binfmt_misc(r3, &(0x7f0000000180)={'syz1', "0bdb26da1178eb30e591d8c61f0462d6fdc155def53b28ee2bff4c7e1f885425ac80fbe9a968d4653ff47af5e7538e97edd04f359426c2e63a1e4111956c63"}, 0x43) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) 03:17:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) 03:17:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:46 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 432.438448][ T3937] loop5: detected capacity change from 0 to 87 [ 432.451600][ T3948] loop1: detected capacity change from 0 to 87 [ 432.458737][ T3953] loop2: detected capacity change from 0 to 87 [ 432.467759][ T3937] FAT-fs (loop5): bogus number of reserved sectors [ 432.474312][ T3937] FAT-fs (loop5): Can't find a valid FAT filesystem [ 432.501311][ T3961] loop4: detected capacity change from 0 to 87 03:17:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x4d0080, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x4001, 0x1) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:49 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:17:49 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') unlinkat(r0, &(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:17:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) statx(r1, &(0x7f0000000100)='./bus\x00', 0x400, 0x100, &(0x7f0000000180)) 03:17:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:49 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 434.982314][ T3989] loop2: detected capacity change from 0 to 87 [ 434.993069][ T3992] loop5: detected capacity change from 0 to 87 [ 435.001231][ T3993] loop1: detected capacity change from 0 to 87 [ 435.002493][ T3988] loop4: detected capacity change from 0 to 87 03:17:49 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8080000001, 0xca8}, 0x4802, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x143000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:17:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000080), 0x2200000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 435.060663][ T3989] handle_bad_sector: 3 callbacks suppressed [ 435.060679][ T3989] attempt to access beyond end of device [ 435.060679][ T3989] loop2: rw=2049, want=230, limit=87 [ 435.070302][ T4014] loop0: detected capacity change from 0 to 87 03:17:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:17:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 435.154567][ T4014] attempt to access beyond end of device [ 435.154567][ T4014] loop0: rw=2049, want=230, limit=87 [ 435.165796][ T4034] loop5: detected capacity change from 0 to 87 [ 435.172623][ T4031] loop1: detected capacity change from 0 to 87 [ 435.185503][ T4031] FAT-fs (loop1): bogus number of reserved sectors [ 435.192489][ T4031] FAT-fs (loop1): Can't find a valid FAT filesystem 03:17:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) 03:17:49 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8000}, 0x4010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 435.257649][ T4061] loop2: detected capacity change from 0 to 87 [ 435.260479][ T4062] loop4: detected capacity change from 0 to 87 03:17:49 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000001440)='./file1\x00', 0x210802, 0x100) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) unlinkat(r2, &(0x7f0000000100)='./file1\x00', 0x200) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x10000, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x168940, 0x0) io_submit(0x0, 0x3, &(0x7f0000001400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000000300)="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", 0x1000, 0x7, 0x0, 0x2, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8000, r6, &(0x7f0000000240)="ac11c089b68cc51a46c82f5e74a99a2eefb464d44d78597371aa42499fd26cefe684b1b7", 0x24, 0x5, 0x0, 0x0, r2}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f0000001300)="7ad85b75d4da147f6942059660af362003ce3228c5d4dea74214e671ad063c7813a24d3a322fb84b783e656a75fdbd843797493513fc4de8982f07f2f220586d886850ef8a86b9dcafaad2c8a9f8ee3911a44082b308ebce2cd4243b1470261ec916c8fe76c621eb9cf6477db3949ac91899bee14981ded14a50900a933dc03026c266252bd074335f46dc74f6140ced631157", 0x93, 0x1, 0x0, 0x0, r0}]) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x39) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x1000) 03:17:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) [ 435.312870][ T4061] attempt to access beyond end of device [ 435.312870][ T4061] loop2: rw=2049, want=230, limit=87 [ 435.325375][ T4078] loop5: detected capacity change from 0 to 87 [ 435.342598][ T4081] loop0: detected capacity change from 0 to 87 03:17:49 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:49 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 435.413392][ T4081] attempt to access beyond end of device [ 435.413392][ T4081] loop0: rw=34817, want=190, limit=87 [ 435.451482][ T4102] loop4: detected capacity change from 0 to 87 [ 435.470527][ T4104] loop2: detected capacity change from 0 to 87 [ 435.478273][ T4106] loop5: detected capacity change from 0 to 87 [ 435.534389][ T4104] attempt to access beyond end of device [ 435.534389][ T4104] loop2: rw=2049, want=230, limit=87 [ 435.550223][ T4106] attempt to access beyond end of device [ 435.550223][ T4106] loop5: rw=2049, want=230, limit=87 [ 435.978610][ T4134] loop1: detected capacity change from 0 to 87 [ 435.990144][ T4134] FAT-fs (loop1): bogus number of reserved sectors [ 435.996703][ T4134] FAT-fs (loop1): Can't find a valid FAT filesystem 03:17:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:17:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000100)="040005090000000066617400040009000200027400f801b3fd98d826d575ba7d56f6536919f15fb92395e7ab9a6337c73f57b5f798fa38bfde0eb95b98", 0x3d, 0x1}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimes(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)={{r0, r1/1000+60000}, {r2, r3/1000+10000}}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@random={'btrfs.', 'msdos\x00'}, &(0x7f0000000300)=""/147, 0x93) write$P9_RWALK(r4, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) 03:17:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 436.145706][ T4151] loop4: detected capacity change from 0 to 87 [ 436.168220][ T4160] loop5: detected capacity change from 0 to 87 [ 436.196650][ T4165] loop0: detected capacity change from 0 to 87 [ 436.197183][ T4168] loop2: detected capacity change from 0 to 87 [ 436.209336][ T4160] FAT-fs (loop5): bogus number of FAT structure [ 436.211263][ T4169] loop1: detected capacity change from 0 to 87 [ 436.215637][ T4160] FAT-fs (loop5): Can't find a valid FAT filesystem 03:17:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 436.254245][ T4181] loop4: detected capacity change from 0 to 87 [ 436.278067][ T4169] FAT-fs (loop1): Unrecognized mount option "nl80211" or missing value [ 436.287970][ T4168] attempt to access beyond end of device [ 436.287970][ T4168] loop2: rw=2049, want=230, limit=87 [ 436.288020][ T4165] attempt to access beyond end of device 03:17:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 436.288020][ T4165] loop0: rw=2049, want=230, limit=87 [ 436.324759][ T4160] loop5: detected capacity change from 0 to 87 [ 436.342390][ T4160] FAT-fs (loop5): Unrecognized mount option "" or missing value 03:17:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 436.465467][ T4225] loop4: detected capacity change from 0 to 87 [ 436.474242][ T4227] loop2: detected capacity change from 0 to 87 [ 436.509965][ T4227] attempt to access beyond end of device [ 436.509965][ T4227] loop2: rw=2049, want=230, limit=87 [ 437.028117][ T4169] loop1: detected capacity change from 0 to 87 [ 437.037150][ T4169] FAT-fs (loop1): Unrecognized mount option "nl80211" or missing value 03:17:51 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x5) 03:17:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x50, r0, 0x10000000) r5 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1}, 0x6) syz_io_uring_submit(0x0, r7, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f0000000240)={0x77359400}, 0x1, 0x0, 0x1}, 0xadcc) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x434c, &(0x7f00000004c0)={0x0, 0xdd2, 0x0, 0x0, 0xffffffff, 0x0, r1}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x11000)=nil, &(0x7f00000001c0), &(0x7f0000000300)) syz_io_uring_submit(r6, r4, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x600d, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x7fff, 0x3, 0x1, {0x0, r8}}, 0x4) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xfffffffefffffffc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) flistxattr(r1, &(0x7f0000000200)=""/146, 0x92) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7f, 0x20, 0x1, 0xd, 0x0, 0x4, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x8}, 0x14f81, 0x9, 0x5, 0x0, 0xbe0, 0x80000000, 0x4, 0x0, 0x42f, 0x0, 0xffffffffffff7fff}, 0xffffffffffffffff, 0xe, r2, 0xb) 03:17:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 437.182695][ T4258] loop4: detected capacity change from 0 to 87 [ 437.188653][ T4260] loop0: detected capacity change from 0 to 87 [ 437.196335][ T4259] loop2: detected capacity change from 0 to 87 [ 437.203293][ T4264] loop1: detected capacity change from 0 to 87 [ 437.204833][ T4263] loop5: detected capacity change from 0 to 87 03:17:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 437.235713][ T4259] attempt to access beyond end of device [ 437.235713][ T4259] loop2: rw=2049, want=230, limit=87 03:17:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x70) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:17:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:51 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x3ff) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) fcntl$setown(r3, 0x8, r6) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r5, 0x0, 0x80000007) 03:17:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) lsetxattr$trusted_overlay_redirect(&(0x7f0000002940)='./file1\x00', &(0x7f0000002980), &(0x7f00000029c0)='./bus\x00', 0x6, 0x2) open(&(0x7f0000002900)='./file1\x00', 0x100, 0x182) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a00), 0x30000, 0x0) write$P9_RCREATE(r1, &(0x7f0000002a40)={0x18, 0x73, 0x2, {{0x0, 0x0, 0x7}}}, 0x18) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) recvmmsg(r3, &(0x7f0000002800)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/76, 0x4c}, 0x6}, {{&(0x7f0000001300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000280)=""/36, 0x24}], 0x1, &(0x7f00000013c0)=""/223, 0xdf}, 0x4}, {{&(0x7f00000014c0)=@qipcrtr, 0x80, &(0x7f0000002780)=[{&(0x7f0000001540)=""/91, 0x5b}, {&(0x7f00000015c0)=""/49, 0x31}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/25, 0x19}, {&(0x7f0000002640)=""/99, 0x63}, {&(0x7f00000026c0)=""/160, 0xa0}], 0x6}, 0x400}], 0x3, 0x40000001, &(0x7f00000028c0)={0x0, 0x989680}) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:17:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 437.366910][ T4299] loop2: detected capacity change from 0 to 87 [ 437.397471][ T4304] loop1: detected capacity change from 0 to 87 [ 437.400565][ T4310] loop4: detected capacity change from 0 to 87 03:17:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 437.419666][ T4313] loop5: detected capacity change from 0 to 87 [ 437.426993][ T4320] loop0: detected capacity change from 0 to 87 03:17:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17, 0x4}], 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0x8000, 0x80) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) 03:17:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x2008040, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0]) chdir(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) creat(&(0x7f0000000100)='.\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) r4 = inotify_init() lseek(r4, 0x1, 0x1) sendfile(r2, r3, 0x0, 0x80000007) [ 437.476814][ T4313] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 437.505635][ T4337] loop2: detected capacity change from 0 to 87 [ 437.515308][ T4340] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 03:17:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x74002, 0x104) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x8001}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) mq_getsetattr(r1, &(0x7f00000001c0)={0x8, 0xe0, 0x6a, 0x5}, &(0x7f0000000200)) [ 437.557245][ T4352] loop1: detected capacity change from 0 to 87 [ 437.572596][ T4352] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 437.584234][ T4357] loop4: detected capacity change from 0 to 87 03:17:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 437.625219][ T4368] loop0: detected capacity change from 0 to 87 [ 437.636215][ T4352] loop1: detected capacity change from 0 to 87 [ 437.656675][ T4378] loop2: detected capacity change from 0 to 87 03:17:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) [ 437.676065][ T4352] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 437.701531][ T4391] loop4: detected capacity change from 0 to 87 [ 437.706622][ T4394] loop5: detected capacity change from 0 to 87 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="0979e9a12fbf0400050900000000666174000400000002", 0x17}], 0x2008, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:17:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0x7, 0x3, 0xc0, 0x89, 0x0, 0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x1100, 0x7ff, 0xfff, 0x2, 0x0, 0x8, 0xfff8, 0x0, 0x1, 0x0, 0x19}) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:17:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 437.818103][ T4415] loop1: detected capacity change from 0 to 87 [ 437.851123][ T4425] loop4: detected capacity change from 0 to 87 [ 437.862024][ T4426] loop2: detected capacity change from 0 to 87 [ 437.868950][ T4427] loop5: detected capacity change from 0 to 87 03:17:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141040, 0x44) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) open(&(0x7f0000000100)='./file1\x00', 0x2, 0x8c) sendfile(r2, r3, 0x0, 0x80000007) 03:17:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) [ 437.945842][ T4427] loop5: detected capacity change from 0 to 87 [ 437.971946][ T4454] loop1: detected capacity change from 0 to 87 03:17:52 executing program 5: setrlimit(0xd71b5d66a44ed225, &(0x7f0000000100)={0x7ff, 0x8}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x48c0c3, 0x0) ftruncate(r2, 0x0) open(&(0x7f0000000100)='./bus/../file0\x00', 0x0, 0x7) lseek(r1, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) [ 438.015392][ T4469] loop2: detected capacity change from 0 to 87 [ 438.023664][ T4470] loop4: detected capacity change from 0 to 87 [ 438.032148][ T4471] loop0: detected capacity change from 0 to 87 03:17:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 438.105727][ T4483] loop5: detected capacity change from 0 to 87 [ 438.117048][ T4490] loop1: detected capacity change from 0 to 87 03:17:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) open(&(0x7f0000000180)='./bus/file0\x00', 0x501440, 0xc0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ftruncate(r1, 0xffffffffffffff2e) 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 438.176049][ T4509] loop4: detected capacity change from 0 to 87 [ 438.181219][ T4508] loop2: detected capacity change from 0 to 87 03:17:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 438.299519][ T4525] loop5: detected capacity change from 0 to 87 [ 438.321051][ T4528] loop4: detected capacity change from 0 to 87 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x200d42, 0x41) 03:17:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 438.386486][ T4544] loop2: detected capacity change from 0 to 87 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 438.468160][ T4557] loop5: detected capacity change from 0 to 87 [ 438.476978][ T4559] loop4: detected capacity change from 0 to 87 03:17:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') lseek(0xffffffffffffffff, 0x1200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000007000/0x10000)=nil, 0x10000, 0x3000000, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="0d292de88f3b13eaed4cc1d345e892d6918c50bd7afad6c509441ffbbfd96328cf31c0f3d115c7b5d11baa40af9b2297d1", 0x31, 0x40000, 0x1}, 0x6) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 438.583812][ T4573] loop2: detected capacity change from 0 to 87 [ 438.605604][ T4577] loop5: detected capacity change from 0 to 87 [ 438.623203][ T4585] loop4: detected capacity change from 0 to 87 03:17:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') lseek(0xffffffffffffffff, 0x1200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0x2, 0x39b9, 0x4}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x3, 0x7d, 0x1, 0x7, 0x10}}) 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 438.753032][ T4602] loop4: detected capacity change from 0 to 87 03:17:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') lseek(0xffffffffffffffff, 0x1200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 438.820909][ T4612] loop5: detected capacity change from 0 to 87 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1', "28a94810be72e937b2825f1fa16e6c0d780075c53c1d359cecf5fc28b4161a3eb5ba233746617215e86e6717e9d2772a6af44dbf93162ee16197031d5b3b6f55e31b16cff7d4286a54a2dd145df5e08515f5487afe1fc8e49541ec6fd6d780f606a44d0f0f3445aafb3a5eb3a155e0529a839807353bc12f67647cfd2967001a2ecf99cf514a6f8327ec1591ac6cbe69e5cdda9506a3588d490464b1b278bd1adb9598e2df5bbfa02c30f851c50f89c6eae0cb0cc749935141e1bebad54777d8c369574d51f6642ac98d62e9f8424f6220088014fb563940d2d72c2caa062c"}, 0xe3) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x300000d, 0x2010, r0, 0x0) [ 438.905801][ T4629] loop2: detected capacity change from 0 to 87 [ 438.912386][ T4637] loop4: detected capacity change from 0 to 87 03:17:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 438.991734][ T4649] loop5: detected capacity change from 0 to 87 [ 439.020189][ T4656] loop4: detected capacity change from 0 to 87 03:17:53 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') rmdir(&(0x7f0000000100)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x9, 0x7f, 0x0, 0x2, 0x3, 0x101, 0x2c4, 0x40, 0x186, 0x2, 0x1, 0x38, 0x2, 0x6, 0xfffd, 0x400}, [{0x5, 0x6f2, 0x0, 0x787, 0x8, 0xdfef, 0x6, 0x7}], "373e656735f3534df856bd7f2970f9cec035c49a96af40e02887f17b86085dc0bd4b93821cc85a7723266a00c5a942f360d848b2115096bdeb2e31224f988bd0e8c978bbb2ce4f2a663f87fe0e5c9e32e22a7d75a597579b0c383259c5958af5eed9881a3cf87e39d4017734dc1d4a32d1ccf3434052f60d7ceb849a69", ['\x00', '\x00']}, 0x2f5) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000180)='./file1\x00') mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 439.170293][ T4676] loop5: detected capacity change from 0 to 87 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 439.254125][ T4689] loop2: detected capacity change from 0 to 87 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:53 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r2 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYRES16]) sendfile(r2, r2, &(0x7f0000000180)=0x1, 0xffffffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r3, &(0x7f0000000280)=ANY=[], 0x12) r4 = openat(r2, &(0x7f0000000200)='./bus\x00', 0x502, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000300)={0x6, 0x10001, 0x0, 'queue0\x00', 0xfff}) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) chdir(&(0x7f0000000100)='./file1\x00') 03:17:53 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 439.529915][ T4722] loop5: detected capacity change from 0 to 87 [ 439.566438][ T4722] FAT-fs (loop5): Unrecognized mount option "0x0000000000000003" or missing value 03:17:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:54 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:54 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:54 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:54 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:54 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 440.000516][ T4751] loop4: detected capacity change from 0 to 87 03:17:54 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:54 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:54 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 440.303424][ T4722] loop5: detected capacity change from 0 to 87 [ 440.312143][ T4722] FAT-fs (loop5): Unrecognized mount option "0x0000000000000003" or missing value 03:17:57 executing program 5: ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000001c0)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea2, 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17, 0x100}], 0x8020, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000180)='./bus\x00', 0x99) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:17:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:57 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:57 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a40)={0x0, [{r4}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4}, {r4}, {r3, r5}, {r3, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}], 0x9, "c5b776e43d40c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r5}, {0x0, r5}, {r4}, {r4}, {r4, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {}, {r8, r5}, {0x0, r5}, {}, {}, {0x0, r10}, {0x0, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r4}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {r4}, {}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3}, {}, {0x0, r5}, {r4}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {r3}, {}, {r4}, {r3}, {}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0}, {r3, r5}, {}, {r3}, {}, {}, {0x0, r5}, {}, {r4}, {r3}, {r6}, {}, {}, {0x0, r5}, {r4}, {}, {}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {}, {r3, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {r3}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r3}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4}, {}, {0x0, r5}, {r3}, {0x0, r5}, {r4, r5}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {r3}, {}, {}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {r4}, {r3, r5}, {r3, r5}, {0x0, r9}, {0x0, r5}, {r3}, {}, {}, {r4}, {r3}, {}, {r3}, {r4, r7}, {0x0, r11}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {r3, r5}, {r4}, {r4, r5}, {}, {}, {}, {}, {}, {r4}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r3}, {r4}, {r4}, {}, {}, {r4}, {}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {r12}, {}, {r3}, {r4}, {r3, r5}, {r4, r5}, {r4}, {0x0, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4}, {r4}, {r3}, {0x0, r5}, {r4, r5}, {r4}, {0x0, r5}, {}, {}, {0x0, r5}, {r3, r5}], 0x1, "2156816c73038c"}) r14 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000000a40)={0x0, [{r16}, {r16, r17}, {r16, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15}, {r15, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r16}, {r15, r17}, {r16, r17}, {r16, r17}, {r15}, {r15, r17}, {r16, r17}, {r16}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16}, {0x0, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15}, {0x0, r17}, {r15, r17}, {r16, r17}, {r16}, {0x0, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {}, {0x0, r17}, {r15, r17}, {r16}, {0x0, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15}, {r15, r17}, {r16, r17}, {r16, r17}, {r16}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {r16}, {r16}, {r15, r17}, {r15, r17}, {r16}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16}, {r15, r17}, {r16}, {r15, r17}, {r16, r17}, {r15}, {r16, r17}, {r15}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}], 0x9, "c5b776e43d40c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r17}, {0x0, r17}, {r16}, {r16}, {r16, r17}, {}, {}, {}, {}, {r16, r17}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {}, {r20, r17}, {0x0, r17}, {}, {}, {0x0, r22}, {0x0, r17}, {r16}, {0x0, r17}, {0x0, r17}, {r16}, {0x0, r17}, {r15}, {}, {r15}, {0x0, r17}, {}, {}, {r15, r17}, {r16}, {}, {0x0, r17}, {r16, r17}, {0x0, r17}, {r15}, {}, {0x0, r17}, {r16}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r16}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {r15}, {}, {r16}, {r15}, {}, {r16, r17}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {r15, r17}, {}, {r15}, {}, {}, {0x0, r17}, {}, {r16}, {r15}, {r18}, {}, {}, {0x0, r17}, {r16}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {0x0, r17}, {}, {r15, r17}, {}, {}, {0x0, r17}, {}, {r15}, {0x0, r17}, {}, {r16}, {0x0, r17}, {0x0, r17}, {r15}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {r15}, {r15, r17}, {}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {}, {r15}, {r15, r17}, {}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {}, {r16}, {r16}, {}, {0x0, r17}, {r15}, {0x0, r17}, {r16, r17}, {r15}, {0x0, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r16}, {r15}, {}, {}, {}, {0x0, r17}, {r15, r17}, {r16}, {}, {0x0, r17}, {}, {r16}, {0x0, r17}, {}, {}, {}, {r15}, {0x0, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r15}, {}, {r15}, {0x0, r17}, {}, {r15, r17}, {r15, r17}, {0x0, r21}, {0x0, r17}, {r15}, {}, {}, {r16}, {r15}, {}, {r15}, {r16, r19}, {0x0, r23}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {r16, r17}, {r15, r17}, {r16}, {r16, r17}, {}, {}, {}, {}, {}, {r16}, {}, {r15, r17}, {}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r15}, {r16}, {r16}, {}, {}, {r16}, {}, {0x0, r17}, {r15, r17}, {r15}, {}, {0x0, r17}, {0x0, r17}, {}, {r16, r17}, {r24}, {}, {r15}, {r16}, {r15, r17}, {r16, r17}, {r16}, {0x0, r17}, {}, {}, {}, {r15, r17}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16}, {r16}, {r15}, {0x0, r17}, {r16, r17}, {r16}, {r13, r17}, {}, {}, {0x0, r17}, {r15, r17}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000053d40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054d40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "71247e8a92e171"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055d40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r16, r25}, {0x0, r26}], 0x1, "1b29dc6455f855"}) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r27 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r27, 0x0, 0x8400fffffffa) 03:17:57 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x59b081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) sendfile(r4, r3, 0x0, 0x8) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x8c00, 0x12a) r6 = openat2(r2, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x2002, 0x2, 0x1}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005db80)={0x400, [], 0x20, "bf2da8b7b39a19"}) inotify_add_watch(r6, &(0x7f0000000380)='./file1\x00', 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r8, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x80000) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r5, r7, 0x0, 0x80000007) 03:17:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 443.037503][ T4800] loop4: detected capacity change from 0 to 87 [ 443.044002][ T4801] loop0: detected capacity change from 0 to 87 [ 443.054380][ T4804] loop2: detected capacity change from 0 to 87 03:17:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 443.078837][ T4810] loop1: detected capacity change from 0 to 87 [ 443.092403][ T4814] loop5: detected capacity change from 0 to 87 03:17:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x108, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb1b4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffa4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x712efb90}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x4000090) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0xdf, 0x3e}]}, 0xc, 0x3) creat(&(0x7f0000000280)='./file1\x00', 0x84) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000200)='[\x00', &(0x7f0000000240)='./bus\x00', 0xffffffffffffff9c) 03:17:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000100)="0c000509080000006661a6a12f4138acf5740004040900e4ff017400f801", 0x1e}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 443.154611][ T4814] loop5: detected capacity change from 0 to 87 03:17:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 443.238745][ T4849] loop1: detected capacity change from 0 to 87 [ 443.246977][ T4849] FAT-fs (loop1): invalid media value (0x09) [ 443.253063][ T4849] FAT-fs (loop1): Can't find a valid FAT filesystem [ 443.271836][ T4857] loop5: detected capacity change from 0 to 87 03:17:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 443.298490][ T4861] loop0: detected capacity change from 0 to 87 03:17:57 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 443.368841][ T4861] handle_bad_sector: 22 callbacks suppressed [ 443.368856][ T4861] attempt to access beyond end of device [ 443.368856][ T4861] loop0: rw=2049, want=230, limit=87 [ 443.475678][ T4883] loop2: detected capacity change from 0 to 87 03:17:58 executing program 4: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='msdos\x00') mmap$perf(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x200000e, 0x412, r0, 0x0) 03:17:58 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = dup(r0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, 0x1, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd239}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3b6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x38e}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x74cf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) 03:17:58 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:58 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 443.899067][ T4898] loop5: detected capacity change from 0 to 87 [ 443.901684][ T4897] loop0: detected capacity change from 0 to 87 [ 443.937796][ T4898] attempt to access beyond end of device [ 443.937796][ T4898] loop5: rw=2049, want=230, limit=87 [ 443.959105][ T4910] loop2: detected capacity change from 0 to 87 [ 443.982231][ T4898] attempt to access beyond end of device [ 443.982231][ T4898] loop5: rw=34817, want=190, limit=87 03:17:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@broadcast, @dev={0xac, 0x14, 0x14, 0x37}, 0x1, 0x1, [@loopback]}, 0x14) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:17:58 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 444.004477][ T4897] attempt to access beyond end of device [ 444.004477][ T4897] loop0: rw=2049, want=230, limit=87 [ 444.079299][ T4933] loop1: detected capacity change from 0 to 87 [ 444.089745][ T4935] loop5: detected capacity change from 0 to 87 [ 444.111250][ T4933] FAT-fs (loop1): invalid media value (0x09) [ 444.117307][ T4933] FAT-fs (loop1): Can't find a valid FAT filesystem 03:17:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9d, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x185) 03:17:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000100)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = accept4$inet(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x40800) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000200)=0x4) truncate(&(0x7f0000000080)='./bus\x00', 0x6) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x810, r4, 0x1f040000) sendfile(r2, r3, 0x0, 0x80000007) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x2e, 0x80, 0x80, 0x1, 0x0, 0x100, 0x8044, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x3, 0x101}, 0x2189, 0x7, 0x9, 0x9, 0xb, 0x6, 0x0, 0x0, 0x10001, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) creat(&(0x7f0000000340)='./bus\x00', 0x7) chdir(&(0x7f0000000300)='./file1/file0\x00') 03:17:58 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 444.270048][ T4968] loop1: detected capacity change from 0 to 87 [ 444.271632][ T4967] loop5: detected capacity change from 0 to 87 [ 444.276692][ T4969] loop0: detected capacity change from 0 to 87 [ 444.305812][ T4969] attempt to access beyond end of device [ 444.305812][ T4969] loop0: rw=2049, want=230, limit=87 03:17:59 executing program 4: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:17:59 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:17:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7) umount2(&(0x7f0000000180)='./file1\x00', 0x11) 03:17:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) lseek(r1, 0x10001, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:17:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) chdir(&(0x7f0000000240)='./bus\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) statx(r0, &(0x7f0000000280)='./file1\x00', 0x0, 0x4, &(0x7f0000000300)) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf5c4}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x45}, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x10000, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf54660009000800b70001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r5, 0x0, 0x80000007) 03:17:59 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 445.031305][ T5006] loop5: detected capacity change from 0 to 87 [ 445.040947][ T5011] loop1: detected capacity change from 0 to 87 [ 445.052256][ T5012] loop0: detected capacity change from 0 to 87 [ 445.058931][ T5015] loop2: detected capacity change from 0 to 87 03:17:59 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:17:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000300)="0400050900000000667400040409000200027400f801f3c86be6b596826cf26eb428bf674b622de41d783237542271e2cd6320038c3e5ad4ae6c7d7540675e8da218b3c21774c2bbf5c1a578e74e3e981c5f742921ea61ffe355c0173bd5ce460f4fc475617db5d267a8d1c1612761ecd0bc432da365a1028c1102c06caa82b280036a961581c8214494f930ca837ab359e9fb1764ad5040b8936336f726a9665ad5745fd535c2dbc84ea483de23525f972c1444f374220eb9dfd7c27567bb3935e950cfe40412739127b3132052e902bece3c8e2ea606592b7762537e7ea23d5b37f5f5", 0xe4}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x8) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x105000, 0xc) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(r3) 03:17:59 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file1', [{0x20, 'msdos\x00'}], 0xa, "bf5d0784f38df9a8d15c34efb4d95a3ac9056b4593ae649438b8b5832e663777"}, 0x32) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000016c0)={0x20, @time={0x0, 0x8}, 0x0, {0x3, 0x3}, 0x9b, 0x2, 0xe7}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r2, &(0x7f0000000280)=ANY=[], 0x12) r3 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x9, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000280), 0x0, 0x5}, {&(0x7f0000000300)="7b55238afe53f1051988889079224d0b667a78ca266b2d2205c738f5224fca5652088be0fd1bae01acc2891277e7ca86a7fed3d9fa3e4c2594c3160b4c2696ef5df92381f1541d4e10114dd5341576984340df0082d962d2c1687376e11983f489782fdbf34b3cc14c9c0d331dc0b215df64eeeee8ec4566b8ac713e944e3a937f2ef84eed154a64654afd3fa96471c8be149a1cd2af9c8be7805155631513554ef06ca89fa5c4ed79", 0xa9, 0x4}, {&(0x7f00000003c0)="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", 0x1000, 0x10000}, {&(0x7f00000013c0)="2ed9f8bbaa4f36f404b2cf2b66e3b2e3f7e73eae76545474b355bffd19a8bda45976a5f281317b648b3194c91e22a2e3b7e7fee6f4de61ba628f7a5a5c6d38e12e27620743626eabfa61944acee56bd71ccb4034c0ae0a22d1ce686a87eb56998282fce70e1222b180ff11cf922a7a0b4961a9d9c6dd38a0b5c6d0409926ac2134cb7f568e029864f61abedc75ccd5317ea0bec073a14a4a129cb005dd0b04", 0x9f, 0x5}, {&(0x7f0000001480)="ce2ff4a6a832c173455ad854569e3046f3fe70e8a6daf5e567b590b2c272298b42c3612304a843439b2ab38423", 0x2d, 0x5}], 0x200000, &(0x7f0000001540)={[{@gid={'gid', 0x3d, 0xee01}}, {@overriderock}], [{@measure}, {@context={'context', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', 0xee00}}, {@permit_directio}]}) lstat(&(0x7f0000001600)='./bus/file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f00000015c0)='./file1\x00', 0xffffffffffffffff, r5, 0x100) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) r6 = syz_mount_image$nfs4(&(0x7f0000001780), &(0x7f00000017c0)='./bus/file0\x00', 0x0, 0x3, &(0x7f0000001a00)=[{&(0x7f0000001800)="b048aa33c5d86e43c8179695f0cbe00bf1509aed38b6bea42091b7ac4b63f9b4f6c5fec1a8346a78f411e4a3afb45d7f617c8e4f426ab1f3b03ee644555d623aaa925db368a03fcfddc985b113c7bd096ccc6d118d964b45f3b68b43775740bb10d32989dfa40c3028480cf0ab81df43706172d98e3945d2b141078633942f0aa068de49adcd07f85d3710e105944dd06140ec4884ab371c5eac542157d0a294630f12fd448a7ab9ca1c7b3d6031ef579ae6068f3cbb4141e21ce355ae8340dc62a5369fbbfb357adc5c8ee045", 0xcd, 0x3ff}, {&(0x7f0000001900)="dd0f4a06b1", 0x5, 0x100}, {&(0x7f0000001940)="dab6d126ac3215ee2b624ff7b77a54f2cc3aec6bd8299f5fb7a1377dc04eb7058e289f12f3d6a1665c0fd4f83c5b420cc810a653af9f3461d6258c8e1514216856a33daafbba1339a932720cd7a745fdd377c794f2ff5a454d897b3bb8023254208204d8a0d272b1c4aceb64d20e89777144160ca40e47256fd43b5f53b7de09c1927357492851a88696956d8940c8d032116680768320614649b125366ed15b80682f2a3a67d2ba48a6beba4d63ca014e55114a9488ea95", 0xb8, 0x1}], 0x100000, &(0x7f0000001a80)={[], [{@uid_lt={'uid<', 0xee00}}, {@fowner_lt={'fowner<', r4}}, {@appraise_type}, {@smackfstransmute}, {@subj_user={'subj_user', 0x3d, '*%]'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) mount$9p_fd(0x0, &(0x7f0000001700)='./bus\x00', &(0x7f0000001740), 0x4000b, &(0x7f0000001b00)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, 'queue1\x00'}}, {@msize={'msize', 0x3d, 0x736}}, {@access_client}, {@privport}, {@mmap}, {@cache_none}, {@afid={'afid', 0x3d, 0xffffffffffffffff}}, {@debug={'debug', 0x3d, 0x5}}, {@version_9p2000}], [{@subj_role={'subj_role', 0x3d, '.-%}\\{'}}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, 'overriderockperm'}}]}}) 03:17:59 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 445.140067][ T5012] attempt to access beyond end of device [ 445.140067][ T5012] loop0: rw=2049, want=230, limit=87 03:17:59 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 445.207787][ T5049] loop5: detected capacity change from 0 to 87 [ 445.212023][ T5048] loop1: detected capacity change from 0 to 87 [ 445.243537][ T5048] FAT-fs (loop1): bogus number of FAT structure [ 445.249909][ T5048] FAT-fs (loop1): Can't find a valid FAT filesystem 03:18:00 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000100)='./file1\x00', 0x200000, 0x40) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:00 executing program 4: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 446.034625][ T5071] loop1: detected capacity change from 0 to 87 [ 446.044423][ T5071] FAT-fs (loop1): Unrecognized mount option "./file1" or missing value [ 446.120281][ T5089] loop2: detected capacity change from 0 to 87 [ 446.127988][ T5093] loop0: detected capacity change from 0 to 87 [ 446.147894][ T5098] loop5: detected capacity change from 0 to 87 03:18:00 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 446.181487][ T5093] attempt to access beyond end of device [ 446.181487][ T5093] loop0: rw=2049, want=230, limit=87 03:18:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040035ab3a43000086617400040409000200027400f801", 0x17}], 0x2010044, &(0x7f0000000300)=ANY=[@ANYBLOB="7ce90bd0e967b01e26d8f8e5737d41c1d465d7c3de5b22ed365080129051bca8afc4346d9f365c2021665f18d3413b4451fbceed2298191445065d938a72312f75f5a9f78c7eed21b6c3bb1fd36558e03c30704d6c8d0194a08686edd765d6c622fdc661419ebe0b116fff76cd15ac50b008acba01da69e9ba6114e3a949e2216104f1d1be4371989c333613b7310a91f1fc3efe7c626be6566626042a8babf0b78786351dc96fb8bf6aa95d4733a52837d731cfed46298a1751b6f7ef8a0a5ff63338", @ANYRES16, @ANYBLOB="f541d056fbbafd2b334efc3a7ecf7e8b22347885d5e7cc327c59eca0745a92e08215d419de96ca0afcb2dcd370d4030fb277d7218777b99acafd5b3fa9d29821bb1b608299f937d333332192ed47b3946239ae43b0532754dc5ae43fa26c9e5c87eee4ebd124d7dafe9b40597e02dedcb3c2e3d59091559c9057d8b79d780cfa12246cb8a3d6479054cc3053650b09c90caf81f02e8d8eb702dac5d8e50ea452a3fe1b45d0c8494e957689cd911acac164f704435fb0c1671963ce81d29fe50eff3e912d87bb6cac3c4e660f57a1f1acf49e260df3813622ed8e9fdf129a"]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6368, 0xe0003) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x1ca9c000) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:00 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1944ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 446.301291][ T5122] loop5: detected capacity change from 0 to 87 [ 446.339055][ T5122] FAT-fs (loop5): Unrecognized mount option "| g&s}Ae["6PQ4m6\ !f_A;DQ"E]r1/u~!ûeX<0pMle"aA ovPiaI!aѾCq361 [ 446.339055][ T5122] >|bkVf&*𷇆5oj]G3(71F)Q [ 446.339055][ T5122] _38AV+3N:~~"4x2|Y" or missing value 03:18:00 executing program 1: chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./bus\x00', 0x10) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000280)='./file1\x00', 0x1aa) ftruncate(r1, 0x1) timerfd_create(0x6, 0x80000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c) lseek(r2, 0x540, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x8, 0x0, 'queue1\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x8}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) fchown(r4, r6, 0xee00) sendfile(r1, r3, 0x0, 0x8400fffffffa) 03:18:00 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) 03:18:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 446.455692][ T5122] loop5: detected capacity change from 0 to 87 [ 446.458873][ T5145] loop0: detected capacity change from 0 to 87 03:18:00 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 446.495983][ T5122] FAT-fs (loop5): Unrecognized mount option "| g&s}Ae["6PQ4m6\ !f_A;DQ"E]r1/u~!ûeX<0pMle"aA ovPiaI!aѾCq361 [ 446.495983][ T5122] >|bkVf&*𷇆5oj]G3(71F)Q [ 446.495983][ T5122] _38AV+3N:~~"4x2|Y" or missing value [ 446.519138][ T5157] loop2: detected capacity change from 0 to 87 03:18:00 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x43) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:18:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = signalfd4(r0, &(0x7f0000000180)={[0x8]}, 0x8, 0x800) fcntl$lock(r1, 0x6, &(0x7f00000001c0)={0x0, 0x3, 0x3b, 0x6}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = memfd_create(&(0x7f0000000100)='#\\\x00', 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r3, 0x87159000) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r4, r5, 0x0, 0x80000007) [ 446.604643][ T5173] loop1: detected capacity change from 0 to 87 [ 446.684719][ T5184] loop0: detected capacity change from 0 to 87 [ 446.764647][ T5184] attempt to access beyond end of device [ 446.764647][ T5184] loop0: rw=2049, want=230, limit=87 03:18:01 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:01 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000001c0)={0xffff, 0x9, 0x9}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0xff) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) write$P9_ROPEN(r2, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x4, 0x3, 0x6}, 0x6}}, 0x18) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x440000, 0x42) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000080)='./file1\x00', 0x420000, 0x100) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x8, 0x4b, 0x81, 0x7f, 0x0, 0x0, 0x40042, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x10001}, 0x20, 0x6, 0x80000001, 0x4, 0x2, 0x7, 0x7f72, 0x0, 0x1, 0x0, 0x10001}, 0x0, 0x5, r0, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000100)="043d4a3007a8ff049f717c3b598680fd051fe31ff10409000200027400f801", 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x10000, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 447.205035][ T5207] loop1: detected capacity change from 0 to 87 [ 447.214712][ T5211] loop5: detected capacity change from 0 to 87 [ 447.216494][ T5212] loop0: detected capacity change from 0 to 87 [ 447.234960][ T5212] FAT-fs (loop0): invalid media value (0x04) [ 447.241041][ T5212] FAT-fs (loop0): Can't find a valid FAT filesystem 03:18:01 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:01 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000007) write$P9_RREADLINK(r5, &(0x7f0000000100)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000008, 0x30, r3, 0xa4a0e000) sendfile(r0, r1, &(0x7f0000000080), 0x4) [ 447.250696][ T5216] FAT-fs (loop2): bogus number of reserved sectors [ 447.257351][ T5216] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:01 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000100)='./bus\x00', 0x30000, 0x48) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 447.360085][ T5243] loop4: detected capacity change from 0 to 87 03:18:01 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:01 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 447.404895][ T5248] loop1: detected capacity change from 0 to 87 [ 447.431665][ T5255] loop5: detected capacity change from 0 to 87 [ 447.482006][ T5248] attempt to access beyond end of device [ 447.482006][ T5248] loop1: rw=34817, want=190, limit=87 [ 447.551349][ T5248] attempt to access beyond end of device [ 447.551349][ T5248] loop1: rw=2049, want=230, limit=87 [ 447.580060][ T5212] loop0: detected capacity change from 0 to 87 [ 447.593839][ T5212] FAT-fs (loop0): Unrecognized mount option "./bus" or missing value 03:18:02 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x20000, 0x72) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}, {@fscache}, {@uname={'uname', 0x3d, '#\xee'}}], [{@obj_type={'obj_type', 0x3d, '@}\''}}, {@obj_type}, {@obj_user}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}], 0x8, "6504a8385cb0d4"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) 03:18:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 448.473910][ T5302] loop5: detected capacity change from 0 to 87 03:18:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0xfffffffffffffffc) [ 448.525921][ T5310] loop0: detected capacity change from 0 to 87 [ 448.534555][ T5312] FAT-fs (loop2): bogus number of reserved sectors [ 448.541113][ T5312] FAT-fs (loop2): Can't find a valid FAT filesystem [ 448.545197][ T5317] loop1: detected capacity change from 0 to 87 [ 448.569818][ T5310] attempt to access beyond end of device 03:18:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 448.569818][ T5310] loop0: rw=2049, want=230, limit=87 03:18:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 448.625013][ T5317] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.629320][ T5332] loop5: detected capacity change from 0 to 87 03:18:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 448.676545][ C1] sd 0:0:1:0: tag#730 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 448.686369][ C1] sd 0:0:1:0: tag#730 CDB: opcode=0xe5 (vendor) [ 448.692765][ C1] sd 0:0:1:0: tag#730 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 448.701734][ C1] sd 0:0:1:0: tag#730 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 448.710703][ C1] sd 0:0:1:0: tag#730 CDB[20]: ba [ 448.737882][ T5317] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.807540][ T5354] loop4: detected capacity change from 0 to 87 03:18:04 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:04 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') setxattr$incfs_size(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000001c0)={0x2e2e, 0x40, [0x8000, 0x0, 0x8, 0x100], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000340)='./file1\x00', 0x8100) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) r5 = eventfd(0xfffffff9) sendfile(r5, r2, &(0x7f0000000100)=0x7, 0x5) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000007) openat(r7, &(0x7f0000000300)='./file1\x00', 0xc000, 0x8) 03:18:04 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff4419, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:04 executing program 5: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x2a4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "1f5580700bfafdc70d1a86e0b07c1f07cbf0835187404ff11c663d0ba0ed245b28fb9b5b16969ee72a0711"}, @TIPC_NLA_NODE_ID={0x22, 0x3, "925dfca60debc9ca4c3f6d88dec72f049a1bba47d5c75cb542f1eaf61a6c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe5da915d}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "afb7941f8775a035480fc1230fe60acafa4d6d6a4be1c71cff3591021adff3794313063d84a16064333c4ffc67d5c43db50eddde0e26da08fad9c184bd8f73c34b3c7bdf0ab6a602f722281ecdaf0d8345c0d7f6737fd627c071b71e5f1e3b055c609c476e309da1057e73984d5973b8040f1348c48a0c6746aeb7c9dfc009c812e84525f08fa86502affa7b6736b315c7006c0151d3cd"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x37}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x1805a0c1d195ad27}, 0x4000004) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x40) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x4b, 0x1}, 0x7) 03:18:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) chdir(&(0x7f0000000240)='./bus\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x5) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x4}]}, 0x28}}, 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x200, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) sendfile(r2, r0, 0x0, 0x5f7) 03:18:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:04 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 449.837302][ T5374] FAT-fs (loop2): bogus number of reserved sectors [ 449.839404][ T5375] loop0: detected capacity change from 0 to 87 [ 449.843860][ T5374] FAT-fs (loop2): Can't find a valid FAT filesystem [ 449.854823][ T5379] loop5: detected capacity change from 0 to 87 [ 449.864827][ T5385] loop1: detected capacity change from 0 to 87 03:18:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x6, &(0x7f0000001500)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000300)="222860ec3d682be7bae667f98f489fda55a455ad8ba656d79a6fbc8e814149b7dfc6e2b3fc1d259ad17c806fb0f79d436e937d49b67070a7bb598abc78345e8853b36ea2a1a6ebb01ea8a1c515ca9da19c0ea6d8c60d9efc36687efa4d13d60c67924bbcf2c6c58b60605bce5c0ee57fb97afaad525a4c915aae5af5bc40affcd97f71975994145ee693f60dc7a42d387edfdb052d353c5d486064cd9c49b0f09abd6ca76dd1b61e0b85c08e2b534aa4625cca6805696eb71002710151163c89399a51dad4233ff4ee83482188da82dcb05eeb5f2e3361e798eccca62d268486286fd30111557e3b5d7c448c4608d915f6efb7c7341eabddf605cbbf9c7a90ccc351e53bf7a87461581ec330397ca80ad67d650b27e92521dbe089743a45ccde766b66b205cca96e7d196b52db9f863ec6b17608b2c34c3b814f9c0c88d0fdd83c57f790714583ec29c9b7ee9af234341a7bd76962cac28801974b725e7e3bc4c9f622387ac7faeacec4b6100970d7978fd180d07fe3bbd416d1e7776eb7392042d42a9686d039635c89b92c389b96584608f908df0d9ac5ee6c2b96f7189b8cd84220e20b7f7c099528c1d21a1c198d42a9734a27292b46b52d2bd7fe1b12c80cfa36910496d2882c48178214f3dea1183c5eb0ebb914acf43496e28421f53f9f0189929911b89d0916f6b0022d2b62b87c9a3d09e8f58a86caa20d8585a13680dc75f15019bf3f301a81171270fc86db7db985ea0571b3fbf1d55ede8860d41996cbedcb6302159edc8c39370ef4e4aa21cbbcd3afacdf9e135f4df851f340ccf5ab46e9983188dfac1be240b52dd374636ba13e63e44c6e38691eb9144d565d7a6715d18db17d6f6991dbbafd5991681fa3aeded19e955a8a5338515328b75e71847deea57d8c519640986e0bfba7b3c01ee006f678f4bde64632619723ea0cb4aa9bafcabeb96d9031406094ba379a7f1ae6f0aa7cb27214230fe5f129801f8e656610edb58ba610fc87e6e49bcc4307a888eb50272d36863dd4c3c4f0b72189d3b8440018fa3feb425d87b25a731f7a07b6c8d56e01fd6de492f9b21dc51f2524080ebf0701104659ce61d02904924b447b5bbfd1cf41a11cd22e4ffa35212d578da829f9603744125e386164113305f5f9202d4b9b026b83b95fbb951d547d23dd1152ea0a5ce39fa656d267ea3084bde0659576278daa6bb85dd082f1255a9f624ab2c43d6b3268a29a621f23d3c3858ffff6af8d5df8ddcb2087dbd0fccfd1a87a883f1caec5dd2ed8d891ee68d57937403be0fedbeda2c8696be438ffaa518f268ae3a1bd74d4e12595cb3d65e41e0d657253bf50b9028fbf9c59832ebdb795aeeb944b7629242c7fbd88b852a05fe549ccc1cb5d8e876a3f1f04dda06d9d2f5924b484b6f0b3766f5a1c37c01a92b3c5dfc507666a823a76223f32b6405d133644df0429be3ffeaf1240606f92704c313a06bd2f3c1e57ea739936fec8dc49112e47fd18592430c60cf112727fde4347bcd6ee95cd27977f2ea00413bc988f0bd9ca54b2f81b85e78b1d4d99eebb2cc607dd70d5fff0252bf708e7c7a5760df924d4a7410fc27d2959575e6edee08967bc66c02f4090462bfa3639ba9eb150f3020b4e69e93214d9156b86f1c88ba5572767de300e13d680cc185ee4131b63d071c3c0abf7cfe37e963f599c6a4c8ff30bd652d927928ef673ec29b8cdf9ef9b17f0c228e194bd8d192dc2a2d26b96664d80eed6c962767fa774e72ad71d4d8ac65812619d27f6763bc6b89ebe4ea425d119726afd23150d934428ec6bb5427d8398339798abe3cf305ad9b2d1264dbeb3f651194ccd25efd89360eed5f88139e7c6accd2bc3043c8540dc3ea751c89a395b7d84552de7f4b7c4129c4637224360b715d9d72aae49d9a1c07f1b72606579dac7c1968a143805503d73bdf7c9ebce09edb72ecd51f555fc9b320c20d1cccaf416485de2f0cd248f788bc66c89b3611c9e05429ec8a88f0c6a3eb098d27e3e9d0eb9eda391d06f32bf0414a59df84231c4c1d0b569a8e7b748e2a1f381f84699516a16b02cb4018864b33bcd9742b848418442ca2df11597bfed3d5df9e64aa44dbb06adb54469e92a91747ae61ea66a2eb4b4f73a4e1096dcbca40e5d886bc53400046690615a73c663ef4e752e0973d7e63fde48aad9d1aa0c0a781bb5d043e9ec9a286b7f28b489976a66d53852fe6c7b3e784de27891e5004eba424dfab2233a559603234163e049dbd6abec4ebd126e37cc9c4111ee842d2ff9fd0109671d805c11a1d1880c5800dc2ea9a4457e048601943a277865c0cfe3092903f18b382ad686b7c58e8cfb640f55320013c70c6f6c8ea8fcbe3601f86909b345894fb16b2cd91ef648941f26d63fa3ab48934f06d4738a1cedbcccaebf406ca5d5b207c3b2f5e061b1cf7eee58aeeca5cdeeda612d93d9860b5ff64294c53453a97977821489f528284f515e9e8e50fbf2980e36ee1b87cab0f0dbf21d1ad20d86849a3dc78a7806676f7aefd808decf4c2b702ccfe7e426a1b31030af7f4180055b4cfe79ced4bc9702897706f91333a5936ccb8057b584adeb575b0300cd22b841d536ddb4f8f45660bcbd1d9b4509a60d14c1614b0c3eeaf9019f9880fc7d06c1280f914cd9308639daefe37176819a3cfeb62c3fe0d22c62be29272aec5d9b97975054268313bad95495c8644310ca9e5864eedac23c056bcaa2b6d7ef6b5b914c629d54835fc1d1d347308c4d13fc9f298996db23f79809133a9936a51d851055e591e9ab8f6d2a308aa5892c3aaec36a359103eb365d4c028a0f2a7bb69ae43638431d61fe1584ebbcaf1d799670477eb920dd318534928d01f6700c8f980051fcda7febf6fd6ff4f098bb13143f4a466bf231335fbeb0511be3590125689d9686dcfc9ce5ae06674cfd46c2f9c947df8ec8a6bfea5356efc6d5ffe05ed8f24f7278359c1f6ed77dccd6ea1f748de7f5892e1803088a331c60cc7b24b0cfda0e1827f1ad67b2b15cf1ed0daf05f0dda767eedaf7b2013045e568ff2647c4832899de97bf0986b5fa2890fc633f5b0812d5c9a108fca4a0d9a2500bb13dc2edd9adfaf1fe04a0e6b5a57861c43e286dff832e3a96944e46fe02402e8e567b1a20869a37adac04f00aef6942dbea9b8996567acb1024f52dfa1394ce8c1ec5e7ed40bc48c97ac258b011e0412a8e7ea653a3c6eb191f35177d55c6636303e622b3aa933ed37a1954b864419a1b5522e806266f649cd9b3c91db4310460e8c7470df861d392e42f3c9ea9cacfffce1443fec31ab682a845a548fb12329a6c7240c9f317becfe83aa5b58e5525fad2f6e7293d8eff004c0f4aca9be7a9f8a5f82825bd14a61f6a770522f569ab4a70db3f06de000c184e1bc2e10c712e8db5603ddb2036c3968eb58aa84cdf7b32ccdb314ea9f0941c6cf5de11fe295d1f1b81313eef89c1965f5c605ef63e9514584bd6ae3bf9072fe9fda1854d2674dfcaff507d90d0076a1ccd2835e174b7af28927ad14cc57a09d90fc319311a569f768132daeb7cfedecbfd49c3c378d7df56bd1e4cdb1b7e85cee58cfb66e8cfad8520cb08f1f84a4bdbf1085eaee1137760a310ab4985b7366c832c8f519be7b7a16677ce980f1bf30a04e354c33d5e3f0fab317c9ffc4c09f03131c7aed4458699b24a7b41e07cb4982d3061f8188bc80ab4f0faead04844037ac7a7acfe62b593d248e303bd79f6fdbb043a6256fabe38f03f9318ee4706dd1ac921064f6ad0b30e71c6e3da9cf1c754830edf53332856fc3fcba4c7f5adeae5a5517d4bbfd90bbe2ba4c7de8db48b4472aae7e848d1ad0376ba6d088dca219279c12a716246e33259efd52da66fe29a5993735ad57acfa7a7b86b6bc8ba6c4d130d9ee09bff74acbb13b0e48484908f09eca92e7d96fb7e9408a38c85fa836cd7ec13ce2a15a14496cb46cd1a8225b59a3274c8ad0ed5f31f4f362b8ede9921ef0b9fdc7069f27ac396458132633b5d8d1cf99476d2532bfdce4863203fe838fff6e892ca7c04f6997239e7c5c6cc49e143a7effed4053f06ee422dfa9ce9afaa85285b7c8faf2c679b8e28a4c25d58332ce9461ab7d87bd96e52685a53a9c6d9b86b67b7e3857ffe38f4eb812c351ab973ebd54e39e4f60d34e1995d45376c9d7e2012ed9f9b97c632e36396dee78f9b33a6a34691d0f2e86832c6ded9c3d50e0e9290e0eecad52934cf1327f74226b56e2ad5bcd322233938f0e145f48aa47c6604a1e88ada0c83c8ee2e01576ff6f65fec191367daa5fb64044401f1796ea00815074e99172dbd84926522e556e4cacd2aa9e3826178f2d2c54efd0380c73ae758e9a7770e2670b0203e96aaacc157d17f578b99fc6c4c105cc08b0c73fe76bf374f34ed538505e84b4641ec3d32fbc26fbf71203a2242758db76d94ac5845482b779c83f4d048f7e78c78d58df20e58673bd2dc32bfd7b121455f11468ae785c7d0febb1e5049717e6d5b64588c1b9df5c9a6c68fb7fc9d3440f5725d67e16747315ce8ec2f724f155d4df67267ce9597acdbf7538b92b0032ca79a58af3647320959d96418d6ec26acbcdc95c70f71648d4f18de0a684122161a04120b47bbbd95a66fe193ea1c128dd30d490db35cb937ca3f8719d8288fe4dcec3d154874abacf31e260549c24391f88d35ec1988f05ed9fb9d8ee82a8c1f2f4378cfa5f43f8df0c6b5ba68c8ff6bbddf9eda5aad422e63771fb5dfdc1be8f802f8bfcff5b21b560045b77ffcf5e1451b9b7deb20eeb4e6306ce78ea974d041c558141f0f9199d51365d1ee8942a83a9349468bb911d885727714207f23756b11f67dfdae35d7a5c456f5561d3254a99a6ed4a6e01a3ea251e71b1e92d59ead449c5783032fbf46abbc282a3585f907c1bc3faa885745056227f21eb57c0ffa37a51dedf6f0133b8a24bb2720d9a8ef04f38cdc1f8e4cc131553e87285480ff66a36f7f7ad91b70d497dc425c2ca443501ecb7f33910cce8b65eec8cbb570d20a79e68cd46ea6d765d74e4cbb8b26c2c47bd849ef18f13dc3110f6e7c88226bbc6244faac18d04da4d0c6c2b73eb317716a2d3ed0cafb6112eaeef259aa456048841b405f4f2bb93d83a27dce0b1d4068f8ee1fbc0fc68231a5401c8340f6d2be8a3b8500283c4dfd5d296b200e96b698a922e24ab9751b368b57a3b3d83facbb5b842ee4a2b8509399e8c440bdb92017d34e4e7d05c171a231a205b2debe601c99e593de304e2cf6d7ed0369d9178aeb77981af2c3a0e080cdff9eb8edf28eb3190187d600f3c9fa3370ea0541f5e48729b4765432c3ef6d4afc6c486638b9358fda11a4f08c08df819faf0596b0e558f2be0c75447fe1ff8c9479779d2117a0b70033c664eef4babad73edd2903664572487c2480499e2bf16aff50e832c11b74b2207bf871cba2dce7fb952845fe008372b65f3967e92cae3807e5ce58b8297db1e9fc66706b42a5d40b05e67e52a9563777f996196b41575cca0db2e80a7d7e4162ca6802e4a937ef025f15398408aaa4c3755f0138ea8b4553f7403eda2e684f1721d7a93bd0f1f420a21f961f4a95b6327012052f6f4979c4e028b6bb18d7a34301985cc1b75ab09efa9323d9fc9984068192177f98de6596773a1adce3ff96a8ac8c98b34551bc89e0602886d7faa5ba99af8566400e53ef0e7bad07db042662ab2cd7874662a0199f9c0fd3270a36bb2be393ddf0faa03185a444f482af76c13b348a2a9e27b7c9fe70a4e2d3df61898a", 0x1000, 0x8}, {&(0x7f0000000200)="baec233a0c625f3e6d37bbd3c2e6188bd8f8d737b4a751d2aec8b9a320e063104f1628aba16f03ed8f7ba93c8109f195348a11a8d6f5fce57b0834fbd0316ea0c175b989cb90e20be5a06e7f438fa418563475ac8555c7307abca6c6f6b8a66b8b8180f5e64da550dc46ada608b14efd91ab57b0445ca620e21d38bb26bfe44dcbe87fdea366d615819ccc43", 0x8c, 0x9}, {&(0x7f0000001300)="1fb406f65f52c71b8e67f77634dff166e264371e852ebee014ddc14986a50ef0b28506e1e06121a7ce3f9df56f61200ce3e25c28895d51ff190029d393adc89bc4db2953a3686c9e7ab8e96853f85dfd2b6c0d9d14ec7a0f89b4ddfd0a0a9c2f2f6b1ac96885dc15", 0x68, 0x1ff}, {&(0x7f0000001380)="fcd46738897ed563838c98dfceb0d1ab64c0d8b4713027291dbf5260f111b20dc68fb9f5c33ad09824c09069a7fffc809e5f7c78310e5da8c91582683256a1b160d628c34969fdefb6a86f4ccac4dcfefb140d078c2e3f99", 0x58, 0x5}, {&(0x7f0000001400)="912138754229ec8848a2ddb33c94d180817959030489442fd95441b934cbea63802ef645a38652897b61facae933493a2935dbddd0ac9b070e9a10ddd4fab808e69df669c1c855acc4c556fad64a19756e8c08fb94e430f6cba0231541c6e4e91f1ad41d03b80b5c78c033bd988ef7405779988e999c62816e6379edb3bc6483b39b7e6c543cc42d55d4698863e61c36f9c5f0131fa603faa8671a7475442578132f02c276f41d905a5cb428a6cfdf78d752a18f00e70fe51672d77ba65a7bb7acb08a2283e148b86d8cbed9f1fd01e4da17fc4ae4d85618c092c5f1150eebf47e2f1421b7adbb39fcd080de81d9d7397491c25fb3", 0xf5}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x1c4) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid\x00') sendfile(r1, r3, &(0x7f00000001c0)=0xffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r4 = eventfd2(0xfffffc01, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x1b6) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) sendfile(r5, r6, &(0x7f00000015c0)=0x7, 0x6) openat(0xffffffffffffffff, &(0x7f0000001600)='./bus\x00', 0x422000, 0x10) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x0) 03:18:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x0) 03:18:04 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 450.003777][ T5407] loop1: detected capacity change from 0 to 87 [ 450.031428][ T5407] FAT-fs (loop1): invalid media value (0x89) [ 450.037528][ T5407] FAT-fs (loop1): Can't find a valid FAT filesystem 03:18:04 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 450.070887][ T5418] loop5: detected capacity change from 0 to 87 03:18:04 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file1', [{0x20, '&'}], 0xa, "eb59f9dd3cc31ea239605778e218a44158e4db29945c812ec29ccb9fee5be285e20afd68beb37530a7b3d1c94d8b09ca17fc817321fd375cde65189270d183c2df4352b13ebed9e038f1ff0a5fa07998ed842116ba4a0410f1a03a982c1e3668809f77ab7dcc703c3656186eab77a97d4f74badc39f42f1987af959c83b919acfdd7a294cdce6592e5a2d40af18757370ae4dbe56ccb599e35366b3f6d3eecfa11542252f7b8003e5acc67073f413a398fe21e96c677784ee7cb7aec8c1b"}, 0xcb) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x90c42, 0x98) openat$cgroup_ro(r1, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) [ 450.155005][ T5436] loop4: detected capacity change from 0 to 87 [ 450.219623][ T5442] loop5: detected capacity change from 0 to 87 [ 450.832556][ T5425] loop1: detected capacity change from 0 to 87 [ 450.853262][ T5425] FAT-fs (loop1): Unrecognized mount option "trusted.overlay.origin" or missing value 03:18:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:05 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1203, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x701001, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0xe, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x30001, 0x0) sendfile(r1, r2, &(0x7f0000000200)=0x7fffffff, 0xfffffffffffffe00) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) sendfile(r6, r4, 0x0, 0x6) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r4, r5, 0x0, 0x80000007) 03:18:05 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', 0x20000200aea1, 0x0, &(0x7f0000000100), 0x12100c8, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) sendfile(r1, r0, 0x0, 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r2, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) 03:18:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) connect(r0, &(0x7f0000000180)=@ethernet={0x6, @local}, 0x80) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x10000, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) recvfrom$unix(r2, &(0x7f0000000300)=""/255, 0xff, 0x40012100, &(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e) r4 = open(&(0x7f0000000000)='./bus\x00', 0x151000, 0x20) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) writev(r0, &(0x7f0000002940)=[{&(0x7f0000000400)="19b81b9a341c3199f662512f12f750f78359738b57027ea15ecc43a7182a68d41b1ad1770734efa1f23387813f9bb04c3d12ae98412c72ae24dea46037d5cd8550d16c98f3ddc9dce65ab17eca08bb9bb6e9b743d243fc5c68200ce0a2e1641694b06009e29ea851e6176fe5e4889d87e70881faed9e1ec20de2a53998fba0824aa3728a2a246487c011b0fb2cd503f6d75122e6ed06916b066262c956265be9e37d921e986f6853416de20a5bd244a4fb7c1745dcf1e7de09016c83a8d80cfaa4b56b9ceb594576493527276db151801c6476fbbe241a9578deb098cbae9d934736c747c3d38783bd40a1", 0xeb}, {&(0x7f0000000500)="5815b3a01bc67bd8513b49294a5cccf0b2edeb5e8d3059d51ef1ec29fc8bf8041b59b31da890185afae68ed54237efc701b0c416a661a939aa8820049645b7d8efeec036e7480af43ddecec2f6edbac397ad6a3b16fdb06f900bbf29710ae26019c7a33e15da9cf598d82b844c11217c6ad06defa9f84fb7679fc074f3945dd1d7bf553742383866b3546c72d8a9c36b083fb5a53b51f5363907b92157d5fd46b36b68d0e857db1f174578f2fa08bb1db0f05d27b00df2ed5215d4af2389d5add7220aed4085d26665894ed12c14dd", 0xcf}, {&(0x7f0000000600)="6c4fa7624620bb065fa73710c9429d259d2d396bf925734c0d9b731f5440330b48a054426da5d2cd09114f9762d334fa06986223d7f24820ec877e84c91ba87344f26dae84d7e1d7869cd79a134601e350c5619c7ad7982b800a58547d", 0x5d}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="ab1daf32e0364b9ed0e56853169de15a9587cf739567e45946d63d8480228385739383aeee94cd013a83dd0634a0be5febcdabeba00fb06b4ea1a1c70e2bc01912733f37c9ba42b3ea2737be57a9ae81a514c983ed275cd9214a7d320db9821a473c94823e361ef5d4f591886e3fe8d742e6c5575825268e3ac93abd88385efaaaec2e65d9d9469f96361e7b26d097fba62bb1819ac2bfd4885942d4b0197d4d568fd722", 0xa4}, {&(0x7f0000002740)="f2a4162d014c89eceddad8cbc8cd98b948a6c881b0a72001e7ff937bf3cea5590ecb1b1972436620a0fc81bbf790827144b5232c573a22288971ec15c10edbe03458722bd073cf88bf58db61d21cf1f3c6442e664dcaaa05121b77cbe55556519911e2d616821544ccec1e51f9f5c10841ed79b03e5be6d54bb1e828e96799e0de5f149d885952fbbdaee3b86578cc3f2503a331eda5e9fb175ba84afa660c1084636e85eeca8f5e2eb5ddaf3472e905c262c764874339e35582665aa96d1170", 0xc0}, {&(0x7f0000002800)="f6e51f639fac164ddd9e3e5d98f4c7965a0d40524c7ec7b24f2746d06443085927041fa8ce95ef9b9580cadd49f1bdb83ad911097b8e896755be4f32f6fd771c2b95e7b647", 0x45}, {&(0x7f0000000100)="20bd4665853492f3c072c7c1939745c0524412a9dd956c636f10907f56b6c21cd249793467f1361270a933121de4", 0x2e}, {&(0x7f0000002880)="8ed51440a4434e7127f0c4067000b1dcc17423b47f51b0ae092e6604bcace98823d0335423cec262950f7ea17fc4f8844372a53a80838ae2eda6665552e749f3d66c385f0c44ef3985db3af0e40807cdd82fe740465f424720f3784ba175bfe23cee50ac6334bb742a0edc1f018f5254b45525d95e623f9f4ad83b330a4c640f8f6bbe87d5a7cb1a7a24249478dc52d9ef11526bb7a327ca7608a2e9133f99fccb320b5fd277a49d8eaefeb237", 0xad}], 0xa) r5 = creat(&(0x7f0000000280)='./file1\x00', 0xc) ftruncate(r5, 0x1) lseek(r5, 0x1200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) 03:18:05 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 451.094222][ T5479] loop0: detected capacity change from 0 to 87 [ 451.103811][ T5482] loop5: detected capacity change from 0 to 264192 [ 451.113512][ T5480] loop1: detected capacity change from 0 to 87 03:18:05 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 451.166392][ T5482] FAT-fs (loop5): bogus number of reserved sectors [ 451.172986][ T5482] FAT-fs (loop5): Can't find a valid FAT filesystem 03:18:05 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 451.210448][ T5496] attempt to access beyond end of device [ 451.210448][ T5496] loop0: rw=2049, want=230, limit=87 03:18:05 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:05 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) 03:18:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x400, 0x200) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 451.355429][ T5519] loop4: detected capacity change from 0 to 87 [ 451.364665][ T5521] loop5: detected capacity change from 0 to 87 [ 451.445235][ T5535] loop1: detected capacity change from 0 to 87 03:18:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:06 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 452.297435][ T5561] loop4: detected capacity change from 0 to 87 03:18:08 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1}, 0x14, {0x2, 0x4e21, @multicast2}, 'veth0_to_bridge\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:08 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x8a38, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x10000, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open$dir(&(0x7f0000000240)='./file1\x00', 0x80000, 0xc) r6 = open_tree(r1, &(0x7f0000000300)='./bus/file0\x00', 0x8000) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x80000007) recvmsg$unix(r1, &(0x7f0000003940)={&(0x7f0000001400), 0x6e, &(0x7f0000003800)=[{&(0x7f0000001480)=""/81, 0x51}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/210, 0xd2}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/237, 0xed}, {&(0x7f0000003700)=""/217, 0xd9}], 0x6, &(0x7f0000003880)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x20) io_submit(r2, 0x5, &(0x7f0000003a40)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000180)="8a907f633250af45cfbf3e9ec96d7b4ebfa6bb26225fae3d1f8f72ac4f880522653b3a358b36a1ad530a277393ef349aad3501f35a0d03ec9094d4c19d6a3411d3db0b11", 0x44, 0x10001, 0x0, 0x1, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f0000000280)="408a6f66899b7557afda2b47656b793c6d5b23d05d3adfeabf39315cb17c19e927bb4dbc65822ab6ffa20438baf1d555e9d99c411f01", 0x36, 0x5, 0x0, 0x2, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0xffff, r7, &(0x7f0000000380)="9306b16d69", 0x5, 0x4ce8000000000000, 0x0, 0x1, r9}, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x6, 0x667f, r0, &(0x7f0000000400)="ee02609d24aae7e3c320930b34ab7feae5743dbf1b22b2b77ca69e9ee64d334f1ccb93f5ae73c3cb1d34580be7af949efe8516c92dbebda529dfd2051565b26775ecda939177672cf893bee23660973ead0951f84df46ef69045263ea07336cf5561000a603bc9534c22b604d4b6f666e797e09459d939380f45adc9dd5177f53a898cf9a0f27424474e921ee8c0c9ae72dc42771c946deacd6744053695776cc654ef23d61bc950a97fb6356bbaa867679215974be0ea41616cf0f8cdf7cef4050d11be514f5fc937868a756ba1b908aff6e3968c13cbf92289689a32d1a4b843c22464c73fd26b90caad44877debe6d97dcd2d870b4ce250000bd6c82766f8d2ae8254c326d8b73e043354bcaf5fcc91848e017fe04667b0ab738b90381b5749551db222ac175a054c10e72144be3c256819105ca2089109f4c56bf8835873663c1b71068102d73718a0a191b2cf77765395d97b4d95e45738ea6bddc1518cc8aee9ff83d8ff237b1197dfeac738418be13e269c9c913e892103e56ebbac56be8a9c2fe327cd1048a112088b828803f2af50f0d2344dc415108cc389e4e5d4d5fa7315eb91cb8ba51e7dcebd4c2db898e89bf0b57b4cdd4ba2678fcd6c710b42fd81f57f161c7b022022906e698bf37ccf9bb5598d88b93cbef4d7cef87e73675b64cec4ac0f62d72dfb7078877c7473167618bb14344b581f920edfc6cc38b5592c8d933ca0f3646c1732b99fd206489f16686293fd8fc68742e0c1c53a00227f124653b01ce9c60ce6127dcb6ff05b01cfa7f756835659127581ff87d2292436dc22fe4f70397fc14397ce8d96b515762681813b9fb8792fd231c33531be7ad7f1b98463315904ea431f165dab3700066d0421368f7cca1aaf7d2d1e16550d1fd6ec996067ae73e22deb95025aaadcd454caeda1ccf7f01aa6286e3ee9feefcc43e2673a614557d4f2c223212292dd27f2c00a5a875bd1cb5c1e41f31b821a99f2fb2c7fce98ff01a63b45c4d259a22291dbceb84e2bc0afea00e1e55fc67c08c93ca8ceb2d007cedcdc9898a6f050a9d281623297ddca1b323206f0f443c963394c338465deca0e54fdc9882e34cbcbf1786e7d7e025f5465e52a8793d814595d67b7c15d351650fcad827bcdeaf705159f5a1faa3e732fa619e32184b2b37f6597e6c9c113210657fdfeea6eaca6f164642d4a31c13a8b970bbf3586696497cbe9a85af3debcac848ee02202c34308d87199cacae2057775d45831b4f58c1eb98fb1389094c9da02d0c2eb5a3bbd262f338fa2f271a3394e266fed75c1e7f7465a4cef78031090bc38da3eb6605184a6be2ffd1eb97e4240d08475adeb40c62675980a7d036d68ab46e57935a66458bf8f97bebd58b903e715f7f11b90e43e5175029cc896ccd3b876826ae85175ccf89b71f592c8e1939265c07e6c7ceac3bfbe122ebd3dfb47eaf07e33a88c2b6454efc88062b180329e22693b9370314cc0708e8af9802382e5d34eb57b0fa7af0fb7f4407a99f30a28cba500ee35455bd3d94c6a81816c6f9f1fa16096f8c9299821ac1a151a32b41536c3cb232305d27ef8a0ce3e952d52be51aa923bce097aff2d7da5e9b966fe8c46541b222442564f2c21b5b491eeec8af2a0c7220ff65cc5b0e6348feaa73f5b025895157e7299492d8200db7132e7d01cb305a38b370d79c895eba8f232e2c17f6e0cfc3037433d2a21615622a3c161562e2facaef2aecb48ab2887471d1ce6d964fccf42c53b4559efff6d303ae7ee7d17519cf76538093f16ce93b9b173fb27b46c68d81eb8ae60d5d23bea9cd456b587e3104aa3dd84ca18998a8f0958652be499b5c2261e60816e971861b3276de3e63c953593c2288e29ddb5b9300d82c7b8ae7cf71871ecb785a7118268d0e7c0634cf03fdf18dc360be3484c9d9ea1a50f95a3605b0276cca511f8e02987b2dfbef100eeeff64aec761ed19dea9337e8d93e6a502767e1b7efdadaff0a62ac0ec12105192a58f5a94bcbf428c094056d14247ad58f5cf3ab7aa848b1f1ff3d5aedc641bb70d6fe7778b3c115fdcaf29052396e072202f7212289ca649eb671a1a171cf403810b4d7f5eb435b9a1995ba88e22539ccab3e7d813cbd502220eca8c5bf378c69f56ed4fbe1701169880d5d6b8d1384eeac93552f8fd2a3496dacd6656accba5dc477de5df48bb92ddca5da2a34cf5111ca531dd4969df7f7b49e4ba51a401a1be6adf73f2cefd2659b3d65d502cd7974e4382a2af273828de8830432a1fff2c4110d5dad186ff215fa36a83ed0c8db039ed6ee65c9204393878f1fd9b722cfc4b0f23e4c07c27912c7a91c1a5262313baf67d8766f9ff420d066869e544e1200371ed6f76973ce0a322d520fb0574a74fe324114cd4d609760b3a7cdab1c44fe287da0c68fc27a660635002610ea468deece9e46b649ef67bb1b9d238d077881223074c70c4330632bfcc5bdc4951296873dd68daa7c3148240c3682aaf21b95925c24b1112764907e22453eda3ea926b222f0d4d753a3f83aa4c0630f184a9168742940d88104860bec1ae3629a04fe9aee9840b4162f7b8f33d30ad7e2c1ffdd13ff455bdeba13de8e0347745c065561409df6ad5c29b9531854b772f933b27d244ef9beab24f6881037709a791daa7371e330e9020cc66cafbd8b4f1a6cb88768ef88f058299bf9b373b98f7a49ed253160d5646975a180ab9058af87f5f4633e90b52c29cf01a3971f341a4c6684ecefa47d08ecdc9ef1f3919effef366251353e255c19ebff3905c23c710b784674f423b1bf6fec0218e5f4f226ffd93dd8da44bd175433829fa3f5dc8ede2fdf63d91f4ea20c4d93103abde7c2dec06a8b3188a281d23dc64d92205afd808178893ed6ccf9c21863cdd90f0b7f96ae8024299ba496ed506debcbf7fad2163b4d888a96b20b3d20bbf7ad8e8bb2a3d314b272e384840fb1481149bcb52f10af6c3e5a943c02ac00db008754c27f01c6fbc3353b7e67bec6b1c6b184e2caf6e8df45d254decb61f591a25f76a23d55d6e12252cfd7bba22fe96b47daf15aa12c370ba53d8525e750de3a44588df9a9952f9a1c718cc436cf10dee580922629fcda2c8e698329afb6b885a8c9c1330c117892499dbcedfb02d6d49a326167daf2d4393f9a0746a0ad738e59de7a5f41d02938b2412a743982b3ab34004655573a88a5b151b45c0b7503e92542492aa1de67fd39d189c2701680c062496d3e0d53be9ccd4556efe16a9d7af460cc77417ea9f52a04668f74281f99ceff20f5c6249c4fc36f51ed85540b8989ef85024a985d7dfd52a2f53ba14bb8bd6a5321c5395b5288ff8d01b557d65447cb67a74ba641c9620ba563673c7ffd46c52f002928781eb40a13d20ab60156871493fa148850536e132c5fd0e7007ebc42d83c415371cfba9283eeea1ebf1c3e52b1d41ba1094a0aeb9863dffb2e6d3d8ccdea00fef76f37131ee9eef02229339cf38b59db79ff7b88272e4ea53fc8bc19643b51b784ea757986bef9c16e869125827cd4927a3d28c78a60703ca62602126df4a82ef55a9988a594eada025e3c8db0ce4a4c9ec736677edd2c0d189b095a5d969025ca56a1b7da759f0f08735101485d746fa4f3dbf3a270dbe1a3a23d31d1d8f087f29e18dbc4d67b7640058ec1251fcf04fc77948086a62108f4af7e657d633229fb379c4cf4ae42ceb18576a42c31e130c58ddb2a80603e7ca56875a1c8e729c4307f9f2f05687ccb0a580d5144c5aea94da1b958a0002278a1cd4d82e7aa366210dbea211e6a7f8cdfad0c48f57c105606e4b33f1793a0332f08d9f482c28388df63de46ee4564bbfcb5c1000bceb0fbc22cabb67bddb09fb7d4ae1567e97438214c5359548823e0489f3e5e56ba1232d9d7b94d3528eee22db660838024a80b9e1f7aaeec72b14f77eb7e8f0c178ad8c912cb254ddc63fab9e8dfcfb3d9ca24792d30b9902d94e493c065ca8e6aa709b814f35da4d57775e3a2a6b368225049a9e48ee239421d4e70fc81b89113a919c0a5df434ffd582f227505d5167d5a58a9aec848dd921b25f219f2c88f1f4199273509250e65c5c38f13cee4e23a85a0cd93d3311a62cadbf79ac842190965d3b95a8406bf7a909b64d8572d470be94bf910100b4626552e012abcd284314294e00d2d8d165a0bcb449c175f6abbb56ba88ee34140cceb768876d3409ccd68c551426e84aa5582e4b8427af00034f728197637be888593b2f63ee9410f7c71c58c8f5f80b92570245e05e1179b970d8402946a3c3c2047adff6c0811589cc5b155a90b1312cc6edfbcb4784c7a0c1581470126ea0f3bcd8624ec85d25b0cb44423f4b557e7dfd2d3ad50d9c905df212cf32d8d791c9d97e6fb75c8282f3cb5ca87d1ab1943aa7fc474720fefad39419e735a2e85d839d85b8e5f02b5a460caf81fdf1546260aa033c1fb734f5e20450befc8ece39bae74cd37e115174157aa2a93a88675a1f6446e7e34cc9a1a09915871d23648dc3af0d1a0f39a7d4d160fe6c28d9197b1672f49de808f3a36b65b3ecb7c59213b5928bc50bb4044914ceb7bf883b964a17e4990defe189c27c6919944f17274ec26218c3cc694bfb6afde44cad2ced8bfabfd357f44c0d0ec46de82a076b07eea39b14fd16b4dd793abee1368b6d381cfdc5476b6d8618ad4db25a51534f0f95876876b957eb4831b2a07d7aef3b8a1c7bfdb845bd202ecbccf45d590774e09e00bbf1a72ebaf2f831712fb03ac7bc3a20b80c59c5bf9484cd84854ea017f988cf4f9f6b0f3011b0738110bb13f807b623b3492446e2eb58e6e8443264f98a673baef33f326c501b90629fd1fe32691b812235870dd947d3a91a0530e228bc0b8bf44b46b00ed5dadc32352fe51168546356a1346a5c8b0fba76eb8948ad66f2acc8d2163d0481f5977508273d4a26887011cb8d01f9f237e17ecb90ecbb5d4c76b5a402ba74032a68d994bf3c8f831ee7dc2866594f3dbca9ffad755dade14fe14daff603c1745022edabe90cd03c7d8f604f6ebe9cbb792491796a24cf7144eba52dced8a18fe583ca176e883b99a4fda5a40ae106eb5b81253214de5b141275b72d2c3441411682e94d165f0f7072f502f1e1f54024ac7919c15906de8b7e3eab97f31a46d51e412899efdf5159165fad4b5ab283f7b281cb9590cd82a8fb72fc2597eca4189c243b3a838dba68085468e9c84cdefcbe1db321c2bad5d432f4ff81ece3806c4baef5c2724ba3bcf6a3784b9267af09a97ef6297ac2cd6eebf1f91f873495b6c11c5a08e98aad1fd79ca004e1cd61fa73f9e82404a5fb83d16fccf5499e536e17a28418062944157ca0bdad875f7425b3c37e50b1e2911d56cdf4e6279ff1140f2da86bc65e6728f7c2d5db87ff0774dfc5d6da53beaef3f2001b254b22b2e5d037ec4101a5cb09893974b31da062640c4ead5e5685af8a5c07067970742cf256597561df41cbd70ec2591f1168315015847b03448166ee240e09f01896d2b96f6b5a504cb64eeb89337606f57932f412d09b79ed2edee6d08ed66693460ac5aa630f4684cc479f24f92b41d2c80b6fd590719431f86e5878c4561018733fd73e3f3d735c8a670004faf15947ac781539c02444629a453c7c3642e34ac2896f7d2a9fa14d62ca8382af4b1d666a1ffeadb9609c6dd305045b868fef474e1d8d9ad689ba22371f170503a543f312e6370731b7c4fa2ed55f9160fbf45d96254f01f5f8ae45d35af580bd7f2950842af0de861921b", 0x1000, 0x100000000, 0x0, 0x0, r10}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x2, 0x7f, r1, &(0x7f00000039c0)="40024cdd47d8", 0x6, 0x9, 0x0, 0x0, r1}]) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 03:18:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6401, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f, 0x300, 0x70bd2b, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x25}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40000e0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 454.255006][ T5574] loop1: detected capacity change from 0 to 87 [ 454.271056][ T5584] loop5: detected capacity change from 0 to 87 [ 454.272061][ T5580] loop4: detected capacity change from 0 to 87 03:18:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 454.328054][ T5600] loop0: detected capacity change from 0 to 87 [ 454.354371][ T5600] attempt to access beyond end of device [ 454.354371][ T5600] loop0: rw=2049, want=230, limit=87 03:18:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x2000005, 0x40010, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x40402, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:08 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) syz_io_uring_setup(0x47b0, &(0x7f0000000180)={0x0, 0x41d6, 0x2, 0x0, 0x325}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@nfc, &(0x7f0000000300)=0x80, 0x80000) syz_io_uring_submit(0x0, r0, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/10, 0xa}, {&(0x7f0000000500)=""/29, 0x1d}], 0x4, &(0x7f0000000580)=""/160, 0xa0}, 0x0, 0x12041, 0x0, {0x3}}, 0x40) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r4, r5, 0x0, 0x80000007) [ 454.373999][ T5584] attempt to access beyond end of device [ 454.373999][ T5584] loop5: rw=34817, want=190, limit=87 [ 454.386694][ T5584] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 03:18:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 454.433031][ T5616] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 454.472043][ T5629] loop1: detected capacity change from 0 to 87 03:18:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) fallocate(r0, 0x40, 0xffffffffffffffe0, 0x8) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setxattr$security_evm(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280), &(0x7f0000000300)=@sha1={0x1, "fc9f5b7b67ed96ffb51ad12018366a1912d7cfce"}, 0x15, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x108}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x100800) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file1/file0', [{0x20, 'msdos\x00'}, {0x20, '{'}, {0x20, 'msdos\x00'}, {0x20, 'msdos\x00'}, {0x20, '$)-'}, {}, {0x20, '[*#'}, {0x20, 'msdos\x00'}, {0x20, '\\\x1d-)v*+,,'}], 0xa, "10744b1cd4926a61ade9e37fa3e3a57bc5759dd8412bf18bfe498b9a89b71ab2293da31e66a5015b0cd4bf17ee5421b0557254b3e9fa1b3148aeaf"}, 0x7d) 03:18:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 454.490498][ T5621] loop0: detected capacity change from 0 to 87 03:18:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000004380)=ANY=[@ANYBLOB="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", @ANYBLOB="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"]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='udf\x00', 0x20a022, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 454.543710][ T5621] attempt to access beyond end of device [ 454.543710][ T5621] loop0: rw=2049, want=230, limit=87 [ 454.567918][ T5645] loop2: detected capacity change from 0 to 87 [ 454.581049][ T5645] FAT-fs (loop2): bogus number of reserved sectors [ 454.587599][ T5645] FAT-fs (loop2): Can't find a valid FAT filesystem [ 454.596585][ T5654] loop5: detected capacity change from 0 to 87 [ 454.645266][ T5666] loop1: detected capacity change from 0 to 87 [ 454.670358][ T5666] FAT-fs (loop1): Unrecognized mount option "qAi9qLlb.X+dyGa) [ 454.670358][ T5666] وhLUy&_\` (eP E08qPM2c78t=glIfA!8b10u4PE'Au#&oiu=CdRxM/k(9aW4EeӠ`5J*צp'[Hw" or missing value 03:18:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:09 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:09 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x2, &(0x7f0000000100)=[{&(0x7f0000000200)="04000509000000006661740004a800000000000000f8015cef0c7aeb144939c401e4f7d72ebe9ced8dc236afe517080b0121e94281350c000000000000b7103a3cd519c6799cb9237b851a42c7e39066d98ded6f947448918515b521639cdf5ac897d1671ce85a74d42e6b76538a1fbfcd45fe4c7da1e31585028244f7e7e67cd6164d0f412f6aaa1fa3e53c06e5bc77342a475335ce5cc2a098c9f48c87d574016e3903b30d578b417c6630228e", 0xae, 0x100000000}, {&(0x7f0000000180)="2e88701ac63e4df4026fe8a1b2edbe0d6d38abfcfecd5645afdbfeec51b7bff58b9ec2738f142f9d5128ace27762a9e90fcd3da6678d07645564369d81b7014552aeb0e2630d41d7855192228576700c9ca0c8212e110c940282fcb0935e1a32b661fd9204a611484370d0aa96227991", 0x70, 0x9}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:09 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 455.148694][ T5693] loop0: detected capacity change from 0 to 264192 [ 455.152525][ T5695] loop2: detected capacity change from 0 to 87 03:18:09 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 455.192270][ T5695] FAT-fs (loop2): bogus number of reserved sectors [ 455.198840][ T5695] FAT-fs (loop2): Can't find a valid FAT filesystem [ 455.200486][ T5693] FAT-fs (loop0): invalid media value (0xb2) [ 455.211445][ T5693] FAT-fs (loop0): Can't find a valid FAT filesystem [ 455.219056][ T5705] FAT-fs (loop4): bogus number of reserved sectors [ 455.225636][ T5705] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:09 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 455.414849][ T5731] FAT-fs (loop4): bogus number of reserved sectors [ 455.421440][ T5731] FAT-fs (loop4): Can't find a valid FAT filesystem [ 455.476671][ T5666] loop1: detected capacity change from 0 to 87 [ 455.500752][ T5666] FAT-fs (loop1): Unrecognized mount option "qAi9qLlb.X+dyGa) [ 455.500752][ T5666] وhLUy&_\` (eP E08qPM2c78t=glIfA!8b10u4PE'Au#&oiu=CdRxM/k(9aW4EeӠ`5J*צp'[Hw" or missing value [ 455.976671][ T5693] loop0: detected capacity change from 0 to 264192 [ 455.991198][ T5693] FAT-fs (loop0): Unrecognized mount option "./bus" or missing value 03:18:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0xaaaaaaaaaaaac9a, &(0x7f0000000400)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000340)="08b3a2c632118205a2be3cc79aec66d5519c78831294aa5744b284699da61cad288296aa77e896d663a021a52814f1a6fa8f710f4bfe529d8082555c0f192e254b323b494b602eee1ed6de07158371392440a676263ad92dde199c8c6f1bbbd128a13bd685c2c9655cc20e51b6c44f279107ee9805c562fe2b051d5937dce5f259", 0x81, 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="7530f6e0a95889f5f679fa8d93a82c2b9d21700a935208e6472b1b98828e02d3cbaa5e0954f7b8a6103ab767df6bbaddb596683f716eb93008ee3f448ed56de2", 0x40, 0xf200000000000000}, {&(0x7f00000001c0)="e824b0", 0x3, 0x4}], 0x2000820, &(0x7f0000000440)={[{}, {')\\,#\\@&%.]&(\\'}, {'msdos\x00'}, {'@:#+!:]'}, {']'}, {'\x87(\x97\x06\xaf\x1b\x8f\v\xa9\xbc\x11\x1aVe\xdc\xc6\xfa\xe6\xdd\x8c\xa2\xcd\x1b\xd7\x19\xc4e\x96=\xb5\x02z\xd5~\n\xe7oL\"\xcc\xc9\x03\xf1Q\x9d]\x9fg\xb3\x8e_\xc4\x1cf^f\xe8\xcanI\xb1A\f]\x8f\x95 \xfc\xe4{\xaa\xdf\x0e\xde\xdf\xe4\xcfx\xb3\xf14\x9e\xaaXb\xae\x81\xae?K\xc7\x9e\xad\x01\x88\xe2\xc8\xeb(G{\xa1^\xb1\xf2\x82'}, {'-'}], [{@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0xca) openat(r1, &(0x7f0000000300)='./file1\x00', 0x300, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) truncate(&(0x7f0000000100)='./bus\x00', 0x3920) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) close(r4) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 458.002093][ T5779] loop2: detected capacity change from 0 to 87 [ 458.018278][ T5779] FAT-fs (loop2): bogus number of reserved sectors [ 458.020891][ T5780] FAT-fs (loop4): bogus number of reserved sectors [ 458.024846][ T5779] FAT-fs (loop2): Can't find a valid FAT filesystem [ 458.031341][ T5780] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 458.066013][ T5781] loop0: detected capacity change from 0 to 87 [ 458.080775][ T5796] loop5: detected capacity change from 0 to 87 [ 458.103317][ T5802] loop1: detected capacity change from 0 to 264192 03:18:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f49e6c574b2eec6b54029e4022ee7e46136698f345ffb4e9a86b3a4e6e9b19d7ff8b8312d88a8daf4ab716d5a51ff230a4dca1056b069f5ce9d752cd3188ea14ec38ed1572fc7dee5bac6474eff217d537ecb9f269db21bd876eee6aa74ca21a1c6e7a2aecc47f4eae2c02e79d7daf6baedb756ac8a21bba312194fcb10d1739259b18d6f23", @ANYRESOCT=0x0]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000100)='./bus\x00', 0x10d000, 0x9e) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:12 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0x9, 0x80, &(0x7f0000000180)=""/128}) creat(&(0x7f0000000200)='./bus\x00', 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 03:18:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 458.288266][ T5832] FAT-fs (loop0): Unrecognized mount option "ItƵ@).a6i4_N鱝1-qmZQ# [ 458.288266][ T5832] MViΝu" or missing value [ 458.333718][ T5842] loop5: detected capacity change from 0 to 87 [ 458.341784][ T5844] loop2: detected capacity change from 0 to 87 [ 458.378428][ T5844] FAT-fs (loop2): bogus number of reserved sectors [ 458.384987][ T5844] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x200000a, 0x4010, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 458.942548][ T5802] loop1: detected capacity change from 0 to 264192 03:18:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 459.028284][ T5885] loop2: detected capacity change from 0 to 87 [ 459.034731][ T5889] loop1: detected capacity change from 0 to 87 [ 459.038170][ T5886] loop5: detected capacity change from 0 to 87 [ 459.076839][ T5885] FAT-fs (loop2): bogus number of reserved sectors [ 459.083410][ T5885] FAT-fs (loop2): Can't find a valid FAT filesystem [ 459.114105][ T5832] FAT-fs (loop0): Unrecognized mount option "ItƵ@).a6i4_N鱝1-qmZQ# 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 459.114105][ T5832] MViΝu" or missing value 03:18:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) pwrite64(r4, &(0x7f0000000100), 0x0, 0x1) sendfile(r2, r3, 0x0, 0x80000007) 03:18:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='.\x00', &(0x7f0000000100), &(0x7f0000000180)={'L-', 0x8}, 0x16, 0x1) creat(&(0x7f0000000400)='./bus\x00', 0xc1) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) mmap$perf(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x412, r0, 0x0) pipe(&(0x7f00000001c0)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e8c36f7400e65bfb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0b389d62805d32f8"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x4401, 0x48) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) 03:18:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x42) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) write$P9_RREADDIR(r2, &(0x7f0000000180)={0x49, 0x29, 0x1, {0x3, [{{0x40, 0x1, 0x2}, 0x7, 0x3, 0x7, './file1'}, {{0x40, 0x4, 0x6}, 0x3ff, 0x4, 0x7, './file1'}]}}, 0x49) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 459.261596][ T5934] loop1: detected capacity change from 0 to 87 [ 459.267934][ T5935] loop5: detected capacity change from 0 to 87 03:18:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) linkat(r2, &(0x7f0000000100)='./bus\x00', r5, &(0x7f00000001c0)='./bus\x00', 0x400) sendfile(r2, r4, 0x0, 0x8400fffffffa) 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x108) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x14, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000004180)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)="60be86c8738d08c32b18078350367c93baa8d6a5d0d8c6eb354c1fd1d68bb9cec721e56ac44cab7b921ba08661b2eba8e389f28435abd231527b973d2793b9e8d7e690da7ce96cda2f6817c6850c62b7b682617ab2e43065cbfcd2594c0f4abb2a35f57e3d7e1e7afa393a10fb682114659a674380e226cb6b0ea19e2dba5a05226241479f559dff102e464587c4dad047a574011ded2eb341a0a3a5be8b110b43ae895de1f03a44eb02ec065bffb17abeda0a05d0250573c86049c90f5b93e1a92332f2ea6268464362df3e35c5c63ac7d85a0344ec141ad9028d2b31a40969de", 0xe1}, {&(0x7f0000000200)="664d4d58be703d853cb8629f024a6da71d3f9a6a68f17e65d5cddbbe3c077c0b49cc8e21033b8a7e9963416acfff80203e3b034b069395ea7e7a5e31a7c0bb69c4e4f95ef5db07a1afd9224f79be5e6b3867bfd9c41b345ea88ea27688154d4fbb3749c7fe69a5d7834c97b5873362f7c812e822f4008830fcef25748e8650ad6c937b2d00deb54745a7f1f431c584b357", 0x91}, {&(0x7f0000000400)="0ab2", 0x2}, {&(0x7f0000000440)="f868ebb141d1a78e0c171a3313c9bc69d0efda92eaa5a0b77e83be039a1f6cfcc241d9cf7b9bf1712e7a2471d5079c8583d6bf2e44a03482588c9b68ed2c94917ea4313dd46bf57f020f4b5f8484d1247f8ad1ac52b89e50143921bd6dc8e783b23dd1b71f26564352caceea5e64216ea6ce562292663765a3e4d666da29425f48b819519f47f936eff338830a0ae59830b0675c72edc4d202d1b3dd17bf61618ed1b0c5686a47270a480d04aedae525f0ec4e945e071a0cdd3184b81a855c52d81fa1cdcb51b376dd", 0xc9}, {&(0x7f0000000540)="0111ecaa4f7cf75beb8a37e75d25f8c5af0ecd5f162df7730dfbd585d0d6133afc83d8667983e01d652b2086337eb17a20af8cd3ff75b915172f480003aea91eab38d3c2b4a14c74a4c50653613e6996ca51f05022b8c7c123c521892458b3271b61a4785f79f85c31f54ed6a1934621442f53accf3e01f523c2ddb3a1d386d5a2fe28fdb2920acba417ecd7a5cd7a590123b28b7e85", 0x96}, {&(0x7f0000000600)="9958f3ee134a5003b34fac5d8285762b20444371050c6f8d0422ac7fb11105abef4828a0e7d0d852e0844211c377f45ca5181e3b62bb99cdd41a402c11598b8f65d8273a491516bd55f42727c89889206caf343b24220f91d90c892e59cbd4d1f06d685a35f0f5f5a0c114b57721eb3b726ef210472dd01466e6ba850db9fed7f7d404767e2834502ea831a080fdf6f32e3a10881cdca7d0e60253c5aa2ba0d9cef0058092748d81c15e66f54eee77748368b0bfdc73c5530ae162642b2a61c2f3803e9c293dd33ba1d53de7d740fa231b8d3472474db3af4b5e949ed4077faddf61e152ce9424d68b74fb9ec370", 0xee}, {&(0x7f0000000700)="1a11caa3dd3848b3c720659d444b9c4ca6f8eec0008e22be8c827a591897d98e51d677ad17e46f6fb012ee375200121d9273be9676e1772a89a6833fe056a5e072a1b43c50bd05e67203e642004c6052251a2d86c2401e9ef89acbfdbeab432db5ec605c0783dea5d8a665f880b7b077af01fe0a0e8174b248b257857c5d3b0855114d309ccb1e38000acdcec9c13334a95ee549cb38dbfaff176aed6a2bec9cc9d6d5295c3ff3b28f3602514666613a55445895208b82b50cf23f133f89a7f3dbcd37054a8f12de143785961cbac927f945759e7274d6", 0xd7}], 0x7}}, {{&(0x7f0000000880)=@xdp={0x2c, 0xf, 0x0, 0x27}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="57d987f6c2d71ebf74c289711b757bc1b112e811a39f08375856cbdf130eaf3b421a3b5dfb18762e2ad4334514e80f8be79383f560f3330604b7ba10cad759e484350319839313753a12f3bb2de42596f10ea5644c29cbe7a8dfc463d029761f7831ad459b20a400aaac0b362e513629", 0x70}, {&(0x7f00000009c0)="d8f4ba21060a7a9c85965ec764698a274d8430f6f81d09eeaca37a12cd45c326674b53e4c0a1e2990cf53b2b29c478f990c4c40320eb401994e8dab7ff9bdb67d2106e91697aa5b2648e3e3b4c0be81079155b350327fa3f30d4f3c9afa782582d381a0a8da36e87dbbdfa393e975a5e0cbffd515d8cc93f1a8b3aa16c68d53e7c3108287be72e523039db7882431fcc3b9cd3e627d490ca7633c954c25fcf4e0b5e7297fa32391593537d", 0xab}, {&(0x7f0000000a80)="13d4dc92e13c31742c916db450f5877b3d3d57eb2f8abd7bde837fa3a887e493664062574146029b298e4685c5761d554baedb34945eb753735aa6834d49c2da3cabf10a44188be8360282f053a4cf37100b3b96719851188f1b7ae640406e7bea81c96b6879b87decf1c70f3ce10744c03008bf25e53249db0ed51ea66154cd9123788c65816b82e1003705900629e86fbb2646b12460276e1ebf6d8f3fb07f538bde82116d9c78fb1965ad4196c0c8682319cf26a8669ff3187731dec1987969b58dd696005358dc4981dbd46526a8c346fad596d37bbacbbcf2aac23df3b3ce3679d27661be9b72b0083c", 0xec}, {&(0x7f0000000b80)="c2cdc6bf16690aec7164a3a98b6b4eebde1a987604a4e8356da70f5548835c352d01ffceb77045d120600f9a6ea0bbd4d2c93335f8493b113fc5150c327cc106d600120ec9eca1494b50fdf1a6f836cdf7dd4271b35253d279dce5751bff0ffbd5c34d4e90137c71e1b41515909f8fe6e9736d06530ca0c2254cd52f63f6cc2702ffe0e2bc9e6e7d6f38fd", 0x8b}], 0x5, &(0x7f0000000cc0)=[{0x30, 0x104, 0x1, "453c973bb9433d526373f56fa2574d294a4645d1617baf7e5a95b45747eab2cf"}, {0x40, 0xe2cad53248f78a8d, 0x200, "8099a31878161581b0c474a5004bf0b6a74ac61fc6708e9fbbf243ac065b9fd000e0ba56a236f1e93fbd06fd"}, {0xd0, 0x101, 0x9, "d460a4cc61c1d9ce1aa047e863dfdb644ed73e4777792674d247dc1b4c6d32e7b094789c551af66e3647d1900f318ca4f482cc4f81c2f4908b0ebfcc08ced19a607b9ad5100c23a91146643e21c4223f92f54fe7aafe0526a33caee2b01376da16c631bafbba969d45e8a0e44a4c860c8f6f38f3f5a6fb0fa99fe030cc45f09e7221ca6686270a2327cb5836deca1ca0a9cc79d8ebda608e4362372303a10aa6fd7f8382158777b2eb240e47fa8aee939fe21a890306188e0e6400"}, {0x18, 0x1, 0x1, "4be78f66d04b"}], 0x158}}, {{&(0x7f0000000e40)=@nfc_llcp={0x27, 0x1, 0x2, 0x4, 0x0, 0xaf, "63be6253987a987f185d666126d9833629eecfc330e5995ac899bce33ade2dda93ce340b12412c5af9225956ff58d77db3857fdd38428f97eb1702c4b30d25", 0x3}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="6791628a68ee765da1b4a86ab7d685e456a083889d5652265c1203bff2", 0x1d}, {&(0x7f0000000f00)="db9fe06095ef9a317c0336c0d2ed625218ec9c85da7ebf519c", 0x19}], 0x2}}, {{&(0x7f0000000f80)=@caif=@dgm={0x25, 0x4}, 0x80, &(0x7f0000002480)=[{&(0x7f0000001000)="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", 0xfd}, {&(0x7f0000001100)="f7064cfc765925aeb1e933397e44bb5e0bce455f1f4738c7cd47e2a07745050b1bbc9be467942f9cd6069ea8f39f18549d4e34db383b270221d5aa20364f7fc43c954122ad22d9933ab108f3c0950e857bbc8dc25a21ca360b40c9e0fcbe115c2555a2032285420ce3ad30fc5bba0657952ca6b4d76236c94de547918285bfa358a8778fd256e3dd8754442007b7340a528ea37696e9ebbee9fe2d91b666d1f14b997aefc03a126ebd5db5f4842149d262f1c4a52207331e4beb1a1d75109e002bba0c65d68a2da2ff831e6da07efdc8", 0xd0}, {&(0x7f0000001200)="06fe97b6d0a53ffdf7948477a2d4a59f28f8eb8c19efcb302b9a5f182dd3b581ca7c1353c162f2aebfe137b9417f31cc43529344845e354db9944a607a94156edd5f00c213240e8ae8e2e8fc92e4ef24e5e3a7e48f1af4a3f5a33737e59734973ac4c72a1f360882a1dfb47205b7f0672178bd16a5c27371b407d000b57f29db0fa26750f677f16d591f93", 0x8b}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="548a97428b62a50e056fe3866e9af0920aead9e63216638ca7f198c3aeaaa7d269ed5103586dee81ec00e76cdfd0095eebce7891ccaa2d42637015c099bfe554bbe573e41009a7f987bbc31689bab29dc264ce935ae9cf7a77c647e670478c7a470dacf3cf53222eef7db4909df701f7aafc83a47ba1ba350a7da42de6d6f99f910419f2525fb5d0bf4398ca89d36aa31a9f9bc7f2ed202c1371b39f9aaa9a000e58356815c40289cd70e1c7d14aa210fd094a94f761af8d7a259b76d2470887c5b343514ffd346bc2f5d8aaa211a9d8bcee06f331b1f5ddd78a0e951a55798f704a875456ba5f", 0xe7}, {&(0x7f00000023c0)="ca0288ee83b8bf521e71c19dabec2b134ccc17b3bef3d0472671d9a76871d9738b270bf0e21e8d756bb8bf32d2c36f013b8b4f476b64e4f20f607c0296030b0e69e026cd29834353936ab0c2a7793c420d8d6c50cd06cb646930f90ba835bb4ae39572a3bada2ee4a0fc87ed4511c1b96bb39d7bfe3993b67be46be00286227a85cae7516934f47b5a8d6fb0adf97e85a6b8f51cc8cfcc7c690b67ac3a239e", 0x9f}], 0x6, &(0x7f0000002500)=[{0x108, 0x10e, 0x0, "f4486dd92a3e5495d2278255ed527a7ae221b1d6de095ea2e7fd8b71570e7744d2c0f360642819a2efcf60af88563cdf8597f2222efc0b32c31f2a4aa03401460e049c7233cc234774fae96a10c46520985e99218f35d1f9a5a199a4160e1be20f7e1796aa2e161d8547e266db4a0e19cf89f32d5274e9ff77b0a02f9f100b1c2d8a49d6b77ecf452461bfed793fcfe73dc9ad58e27ff83245d6462acf03d34592db4c41782f40d1842d4c8cf4bc39072a830963ff15dc761dd313a5318e4522fa40194ae06988f28b0f65c5272b5e2dfb4a80a440da4e8d0d09236d9dadfacf6caa77ba3e33758f24d222467fb2fa5d3299f965f285"}], 0x108}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000002640)="0d35b695ee9d93b4a2302f538a5dde5f7b088e83ef7b0331f0b3f90632948c50e8473b49f459e8f8bc4f50ea1c2f0b376427629a73c13da7f001201a9a9acbe45404f7f614", 0x45}, {&(0x7f00000026c0)="5014d304d15523433df294b717cd48353cbd9f8eeb8e99853203b2854cabcf4dc12adf6cfab3facf0c2bd31e6bddeef85e7b78b92d83502cfad2acbea74aae8ea325bcf2873d64e380ee0d4088ef8022815a8f781ee050c5e0abf1c5c41554bbeefdd572c2b521cd7f25be322ea97b1643011ec38a447f6bfdb559e4f45596552f17c89b69ee1b39170a35ad94d4b3a472ec5a6b111884", 0x97}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="1044aae05176da35deefde1099e1b24f3f7ad8b2bf2d52eac9e3fbb940365bc76f599db66b958176ee3fd9c61100a2ff74b465bcdc543402c4731e3770a3cd09e08a863f7bd55eb50923b6ca6d2af3b839b164e046f0aa56c294484f433b3d5ec36783db9594ba42d81006014ec1957487aa361610b8b975144dec966e420e125bb07234a5972f97e6cd9471d6bafe56dda50f5bffa5e838f5246e1c4cb7f1231c792ab5a19f27b65b172aed1cc0cfb09aaeb1ee127336e9375bc7e28a440e0b3e778b3f", 0xc4}, {&(0x7f0000003880)="3ea326b95a04de41da218ce6d71a14c44080d1bc7d83d49e2bc7f4d1102204ab8a6de31db1a748e9830e9461343258d2d01280554676b9c1b9e4d16cb6941b8bd878779f4b1eea5c98b70538f41039ffa00f802ee179a65bd2e31e8bc47ab0f3954a14f0a45dd2ebadb3afb3217f08b35eeefe3b4c68e27f4902e871ecc9a24eee3693da6a68105536b4e752b6e7f76d46428fb716681b013008f39373d15fa12937b033a95fb6b5c9ae4f1b1a17", 0xae}], 0x5}}, {{&(0x7f00000039c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003a40)="2b4f2979271d9a56b68bdc4932072d7b8ff2a2b11b89a48abc8405508cd50c1519416ad653eb0957d28358ad1c8c1a325222aff6f6785286f8ebbe33e51f0a65093dccd87083f2db5d1cdd5f4e076bd7aee70a2b9e0f609d2eb175ec8b232e6fcfbfdc0a49b12a41d19cd8217c4f40374857df25fcc624c2f4c5a1cfe1ba6bfbf26826f38d3296f1fda15d059d15c1eae24bc0039e1642c357b0d68277675613d2ef46605f870f89dba7af99c176", 0xae}, {&(0x7f0000003b00)="e5545d6cff", 0x5}], 0x2, &(0x7f0000003b80)=[{0xa0, 0x101, 0x8, "d537dc1a22ffbd8056b13781168aa1bf191dd4667a5ec8a32dc12c4b3620a050f71a6a40aae1a652a0244a6a0c336a73e0bb7d25224b0586af99fd48c517545c281e7aebfa78432513996bab15cc63bfcd4731fd25dcf607b1a8e81150315960cda4d3c356ee9ccaf6fae397a05d6984a513b2af70dbad18ed675e642b385371718b6b00fcbd0efb77ec5a34"}, {0x60, 0x10f, 0x7, "91c1758ee5ed396b1fbdc52af5ec05ac89b11ad4c41952ddec0b93fc6ccda46b863d774932ab586235739ff5ad60d274e3d71405caf2c7c2d4f36a0299700d7d3cb7d7b4dcb9e7a43d4f9f447938"}, {0xe0, 0x18a, 0x3, "b3444be4135fb68c9c46ef0eb5714d491254c70a3cd34f014696f1c0ec8eb6519ce18ab0f8b5d6c0aa76b68c6bb352d8dd2c623ccb650219f753ec4e5e35a5200394b9947efcd7c845cc6830d5d56d858f63f7eb470164bd3fa8687cd46b640dc86287a13ef037ccd0227de5e57793ddfe1eef2aa10747c27bced5dbb7e9626e2a97241b47d407c83b5adc60fe8cf5c59e47ed9df37760cfece8d17e87467c73655d8e085fa77c19d32c80d9952d2adbf47dbb607d2b0ed1d84ecf7fa889b2d93df0e0da339348c25e"}, {0x110, 0x119, 0x80000000, "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"}, {0x60, 0x29, 0x400, "40b19bb868909d50eb83b8d51844f167b9aa03176767829cb09f92e6cc96c25febcf2aebcc581f878c7393e39aaac2f0313aef1b29c705a4f24057299acd38a6ddaa5779afdde662ddddd136c3"}, {0x98, 0x107, 0x1, "d198654428e93a5ffa45c370cc6b8a18cf93151ed7f9872411e5751b082daa465f2ec76003cc66d116d099832e5ed75a50f1ed7b2453a2e99635a24343915c4944d3d4d0e6dcae1833e3889c49b0dc5303a05ac79f30f3ab9686f8ed0268348b4d5b4f93ca336eb6617e3f964b0a812d267a8db4ece955d5198aa2095687d6b41906133156e4"}, {0xa8, 0x118, 0x2, "0d8f376bdfe90f1d486a33f973072f13d99a06aa4b88c90fd0b37f41f83dce553f655348b2712e029513dff888565b07fe20d86b89539f8a6ddb1f089220c70fffb583cb13bf62c4ed3adf4ce64c4a842d5865c16262433475ca6f2bd0f55d5a4d6651c05dee3af4fcda37adbbdead58f78e48f5186a1cfb5afd0f5a3226bc8b157dfc53399db664ba964ba28f80d35ac73882c3"}, {0xf8, 0xff, 0xfffffffe, "92f3bbeb9389d0ed050323169d08b28a41992c7a50e7d7571dfcb3617003068e004487624cfdc99a3c05efd23a40be4321c9ddfe1b8019130f356bd73d6f7878ef37b0d3cdf5405d749ca060b95b46a4e57e5cafd2a16533416508062928cc7ca94253fb2ff4e0603923169835d632a028445e78dcf4d72dbd39090a5f629952706c1977ecb9cb45264bd346f543298c819d27e90cc8b21d33153b727b883b0ba4db870f3f3f554a6af7fde7f01136f68b77481788f5b975eef8c8bebbdaf2de220f09cf12d488d188891e9e90b2512dfa723a3c62f0d48e8834ae75f0154b7bfd447b461d"}, {0x68, 0x119, 0x20, "3bb510e220cf60164f89c1366fe89f5ae63acb655d6eb050387f1b57af573589843412152e560894e3ad7a904ce598ed1f77fdb01325fe3d7023d556308a8c5f99a9cc8b3637299582c95f9fa6cbd713b5defcd515073d25"}], 0x5f0}}], 0x6, 0x20040000) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 459.375311][ T5957] loop2: detected capacity change from 0 to 87 [ 459.394050][ T5958] loop0: detected capacity change from 0 to 87 [ 459.407601][ T5957] FAT-fs (loop2): bogus number of reserved sectors [ 459.414244][ T5957] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 459.448880][ T5958] attempt to access beyond end of device [ 459.448880][ T5958] loop0: rw=2049, want=230, limit=87 [ 459.460481][ T5974] loop1: detected capacity change from 0 to 87 [ 459.473701][ T5975] loop5: detected capacity change from 0 to 87 [ 459.478208][ T5974] FAT-fs (loop1): bogus number of reserved sectors [ 459.486435][ T5974] FAT-fs (loop1): Can't find a valid FAT filesystem 03:18:13 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(&(0x7f0000000180)='./bus\x00', 0x32) sendfile(r0, r0, &(0x7f0000000100)=0xffffffffffffff81, 0x5) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x4, 0x9, &(0x7f00000016c0)=[{&(0x7f0000000240)="5c324c2f18ff9045dfec9d88927d8f332870c62b130c32a04f87bc5277f53e7d552a5f8e26232960495380222535618188151ecacefc027d4c906abe0f2001ec46cc664144d6e9ea4a965a13631ba71e3b9d35c5c2c330692125942ba2e5aa77a49fe3fb0981df8599ea9d8764f4b8f89503792f3e7835", 0x77}, {&(0x7f0000000300)="44a757227e3da9515506998adedb06a97c79ea082d0954ed0df76d399f1be8d34ac16230549fbd9e26e931ada5c4d552e3653c3b44904ebf16a6d828f03095c27b1aae96b0345a1d9c1a257acf9d279d9eb321add68f025c2611f527b4a18e3df9b30bb949945b0eacd17acc7913c08ae64e83929934909efc85a37aa5b504ef0a86e3dd9b5bf22efc612bbf98f66fa3bc7f7cbc22078cad5b2d7356bbed5a", 0x9f, 0x3}, {&(0x7f00000003c0)="890a70b0d81c4854cdd93cddba4858772cf4a8535f29966cfe5fc6ee6e15027e17b80ad492c44852b6fdac93ba9f27160197df65c706fdaecd31b0176ad9969653a0831075b40c10de266ac1c8d9016d86bf075fcf80af123953bb6d39bfe87b5e265d9641237321515aeddf2e0bc664265aefd5fe51bc0c64af8470255c76875b53101844384af5cc51c8185ed75c28b74b", 0x92}, {&(0x7f0000000480), 0x0, 0x4a}, {&(0x7f00000004c0)="3c6924a3c716ce47de54919d7d5aa9253e3de10c1d7e696e918895e1db4f66dc53e0feac7e602baff99cc5250915a52d813e2a2b5ae8364c84edcbb77d82134d5be2b31bd9d55a79681883e479e9698394e547000375be15c274efd7dc40a1e4825bd6b9859cbc2541c09d9500792db6", 0x70, 0x4}, {&(0x7f0000000540)="6d499c16686297c423a2d7bd7a4c0d938897ca85b7c312c8d768acc73c8eb8c5527408c607ce3f1592dcbf52658e902c5c65d8873005aaa38540d298310784061ca3c0eb27682891af1f50b24fa2d5479bd443825789b77861a3a927abe28241534633ac944c0b3b0f44396b586520280bcdbf0e5b21384a8bbc323d", 0x7c}, {&(0x7f00000005c0)="b842d366a997d1d95f4b47e3f1ab96c7cb9933c10bc67bf74d119526b513ee35760fda26acff2cd7c8c0e82328e5e87c90c3ea303c74d4c11a9ec7673375715ccc1ac4c6b3cc17b3ecd0f0303b19b2c1280f48cb412af3340aa34b6e98d59416af3318d406069eb960169d2a13", 0x6d}, {&(0x7f0000000640)="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", 0x1000, 0x16eb86f}, {&(0x7f0000001640)="2ac544dfc3854da70a19ab0683a9141ac030a70cc5d5f846de89517ca9382b9d4e471ad11b2060e36cc3f39aa6ca764c58d4f7bc77a553c26cbdaf5b9dc009ff1fcdc3676d232e8c4625cc557600d49415c187cc91963c", 0x57, 0x70b}], 0x30080, &(0x7f00000017c0)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'default'}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsroot={'smackfsroot', 0x3d, 'msdos\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '[+:\xb4&'}}]}) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) 03:18:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) recvmsg$unix(r0, &(0x7f0000002800)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000240)}, {&(0x7f0000001400)=""/163, 0xa3}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f00000015c0)=""/67, 0x43}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/37, 0x25}, {&(0x7f0000002680)=""/187, 0xbb}], 0xa}, 0x20) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./bus\x00') mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1902000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1944ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 459.583998][ T6005] loop0: detected capacity change from 0 to 87 [ 459.625686][ T6014] loop5: detected capacity change from 0 to 87 [ 459.642235][ T6005] attempt to access beyond end of device [ 459.642235][ T6005] loop0: rw=2049, want=230, limit=87 03:18:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:14 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000180)={0xa2, 0x29, 0x1, {0x4, [{{0x10, 0x3, 0x6}, 0x3, 0x81, 0x5, './bus'}, {{0x2c, 0x3, 0x2}, 0x1ff, 0x62, 0x7, './file1'}, {{0x2, 0x2, 0x4}, 0x80000001, 0x7, 0x5, './bus'}, {{0x20, 0x3, 0x3}, 0x9, 0x0, 0x7, './file1'}, {{0x0, 0x1}, 0x5, 0x1, 0x7, './file1'}]}}, 0xa2) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r3, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x0, 0x2011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 460.145033][ T6036] loop5: detected capacity change from 0 to 87 [ 460.301041][ T6054] loop1: detected capacity change from 0 to 87 [ 460.330651][ T6054] FAT-fs (loop1): Unrecognized mount option "N(/snd/seq" or missing value 03:18:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000001c0)='./file1\x00', 0x608440, 0x31) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x2, 0x3, 0x8, 0x100}) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:14 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x2, 0x1, 0x8}}, 0x14) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:14 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5601000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 460.531810][ T6070] loop2: detected capacity change from 0 to 87 [ 460.539991][ T6071] loop1: detected capacity change from 0 to 87 [ 460.542897][ T6074] loop5: detected capacity change from 0 to 87 [ 460.559977][ T6070] FAT-fs (loop2): bogus number of reserved sectors [ 460.566561][ T6070] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000300)="04000509000041a225445257ee781cd58803eb000866617400040409000200029500f801", 0x24}], 0x1000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) lseek(r1, 0x8, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x82800) fchdir(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101041, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r3, 0x1c5f000) open(&(0x7f0000000100)='./file0\x00', 0x40, 0x14) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000280)=0x71) 03:18:14 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:15 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 460.716913][ T6100] loop5: detected capacity change from 0 to 87 03:18:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 460.869153][ T6119] loop2: detected capacity change from 0 to 87 [ 460.906651][ T6119] FAT-fs (loop2): bogus number of reserved sectors [ 460.913213][ T6119] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:15 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 461.099226][ T6132] loop5: detected capacity change from 0 to 87 [ 461.140423][ T6138] loop4: detected capacity change from 0 to 87 [ 461.178214][ T6138] FAT-fs (loop4): bogus number of reserved sectors [ 461.184903][ T6138] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa202000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000500)=""/148, 0x94}, {&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000640)=""/209, 0xd1}], 0x9, &(0x7f0000000800)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00004f1cff00000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x108}, 0x40000100) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a40)={0x0, [{r4}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4}, {r4}, {r3, r5}, {r3, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}], 0x9, "c5b776e43d40c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r5}, {0x0, r5}, {r4}, {r4}, {r4, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {}, {r8, r5}, {0x0, r5}, {}, {}, {0x0, r10}, {0x0, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r4}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {r4}, {}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3}, {}, {0x0, r5}, {r4}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {r3}, {}, {r4}, {r3}, {}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {r3, r5}, {}, {r3}, {}, {}, {0x0, r5}, {}, {r4}, {r3}, {r6}, {}, {}, {0x0, r5}, {r4}, {}, {}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {}, {r3, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {r3}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r3}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4}, {}, {0x0, r5}, {r3}, {0x0, r5}, {r4, r5}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {r3}, {}, {}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {r4}, {r3, r5}, {r3, r5}, {0x0, r9}, {0x0, r5}, {r3}, {}, {}, {r4}, {r3}, {}, {r3}, {r4, r7}, {0x0, r11}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {r3, r5}, {r4}, {r4, r5}, {}, {}, {}, {}, {}, {r4}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r3}, {r4}, {r4}, {}, {}, {r4}, {}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {r12}, {}, {r3}, {r4}, {r3, r5}, {r4, r5}, {r4}, {0x0, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4}, {r4}, {r3}, {0x0, r5}, {r4, r5}, {r4}, {0x0, r5}, {}, {}, {0x0, r5}, {r3, r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000022c0)={r5, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f000005b680)={{0x0, 0x7ff, 0x2, 0x7, 0xc4f9, 0x80000001, 0xd2, 0x3, 0xde, 0x1, 0x0, 0x9, 0x4, 0x8000}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b740)={0x23ec000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r13}], 0xfe, "1b9d53bbd92fea"}) sendfile(r0, r2, 0x0, 0x8400fffffffa) r14 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r15 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r14, r15, 0x0, 0x80000007) 03:18:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:18 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000007000/0x2000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)="0ab6c32976964130d0a41bbb7bb5d5cab9d742adbba11999928a9df96e4d3c6535a45106dde5e666ec411d0c041cb68d9459e351e3d564169ef293f7285a3e12aa69d0efcb4ccd5211d8121a9f69d6541a43958795438d8758d544", 0x5b, r0}, 0x68) chdir(&(0x7f0000000000)='./file1\x00') write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000000000000000000000000000001600"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) 03:18:18 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000001c0)='./bus/file0\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) r4 = open_tree(r3, &(0x7f0000000080)='./file1\x00', 0x8000) mknodat$null(r4, &(0x7f0000000100)='./bus\x00', 0x1000, 0x103) lseek(r3, 0x1200, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffa) 03:18:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 463.953895][ T6171] loop0: detected capacity change from 0 to 87 [ 463.962457][ T6176] loop4: detected capacity change from 0 to 87 [ 463.963714][ T6175] loop5: detected capacity change from 0 to 87 [ 463.978134][ T6176] FAT-fs (loop4): bogus number of reserved sectors [ 463.978331][ T6177] loop2: detected capacity change from 0 to 87 [ 463.984704][ T6176] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf402000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 464.029173][ T6171] attempt to access beyond end of device [ 464.029173][ T6171] loop0: rw=2049, want=230, limit=87 03:18:18 executing program 5: chdir(&(0x7f00000001c0)='./file1\x00') setxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000580)=@random={'os2.', 'nojournal_checksum'}, &(0x7f00000005c0)='$%}\x00', 0x4, 0x2) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = openat$cgroup_type(r0, &(0x7f0000000640), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000680)={0x0, 0xc000000000000000, @status={[0xc8, 0x3, 0x8, 0x2, 0xffffffffffffffff, 0x3]}, [0xb, 0xfffffffffffffff7, 0x6, 0xdc2, 0x1f, 0x6a, 0xfffffffffffffe00, 0x9, 0x10001, 0x1, 0x1, 0x6000, 0xe9e, 0x400, 0x79, 0x7, 0x1ff, 0x80, 0x3, 0x94, 0x3f, 0x1, 0x9, 0x0, 0xffffffffffff8001, 0x2, 0x4, 0x9, 0x0, 0x7ff, 0x7ff, 0x2, 0x6, 0x80000000, 0x7, 0x800, 0x80000000, 0x3f, 0x1, 0x0, 0x8, 0x1ff, 0x5da, 0x6, 0x7, 0xa76, 0x7fffffff, 0x5, 0x5, 0x4, 0x100000000, 0x7, 0x1, 0x8, 0x100000000, 0x1, 0xbbe8, 0x47958bff, 0x4, 0x1000000001, 0x82, 0x3, 0x0, 0x2]}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x9000) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ff070000000000000050323030302e4c"], 0x15) fchmodat(r2, &(0x7f0000000600)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8a9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x9ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) execveat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000001140)=[&(0x7f0000000140)='cgroup.type\x00', &(0x7f00000002c0)='os2.', &(0x7f00000010c0)='@^--+-@/,\x00', &(0x7f0000001100)='os2.'], &(0x7f0000001280)=[&(0x7f0000001180)='&[{\x00', &(0x7f00000011c0)='cgroup.type\x00', &(0x7f0000001200)='&\x00', &(0x7f0000001240)='nojournal_checksum', 0xfffffffffffffffc], 0x1000) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x4943b72, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000300)="fd5609159b23881da4f9046644fa19bab34038055970869b2de16dbe785a4ff03110f6eb6405f430e871bf630ab7a5faffc9ffde9c28079750f44887f740c15cb61abd686e6a90ca4511d376cf829aa892b4db6033fa2efed1d942d8742c1cf11c8adf2555340faa6fdbefef9e5ccf6cd40d05f304a7743f500560de51d0aeedd0c5a36c9b2b47abb08f0267d9d4d08bd45df544c3dc14b43b909609a1cf4714090d920880bece21d6acd5b2a5ae39dd4efd736b4a1b8ca639adeaaa675e", 0xbe, 0x3}, {&(0x7f0000000280), 0x0, 0x8}, {&(0x7f00000003c0)="042691ace4e89e09f0e0240318531ba78bf068b91b1d6fbd8df4b3f5a7d442552b6ff2dc39bf44085b9d9ab801797d43", 0x30, 0x9}, {&(0x7f0000000400)="a090fc32af296edd9ae8ce89f6e82465aeb973b516481bba2322d87a276c169b43bc1d99fd326e113e639415cba507dbafc2a6b3b0d2010b51eea7b014483b2e3582ed2fe57c365a34c8144dc6786ca852c252bc749fa9287168637ac302d1c786c904e9fa4a9f2b54b18746bb5bf2def968ebbba4edfc6248c5e3c26e3f6ef0f49e5e7d616219cf68bb68f4d82a8550038be38661fc1b9bff870f", 0x9b, 0x1ff}], 0x88, &(0x7f0000000540)=ANY=[@ANYBLOB='nojournal_checksum,debug_wanttra_isize=0x0000000000000004,\x00']) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 464.072262][ T6177] FAT-fs (loop2): bogus number of reserved sectors [ 464.078830][ T6177] FAT-fs (loop2): Can't find a valid FAT filesystem [ 464.107913][ T6207] loop1: detected capacity change from 0 to 87 03:18:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 464.166122][ T6215] loop5: detected capacity change from 0 to 150045 [ 464.207366][ T6215] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 03:18:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 464.271323][ T6231] loop0: detected capacity change from 0 to 87 03:18:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 464.319349][ T6232] loop5: detected capacity change from 0 to 150045 [ 464.328052][ T6231] attempt to access beyond end of device [ 464.328052][ T6231] loop0: rw=2049, want=230, limit=87 [ 464.351036][ T6232] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 464.356695][ T6242] loop2: detected capacity change from 0 to 87 03:18:18 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000100), &(0x7f0000000180)=@md5={0x1, "b8a7fdfcfd36839248415824fc08264e"}, 0x11, 0x0) 03:18:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) write$binfmt_script(r4, 0xfffffffffffffffe, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 464.429749][ T6242] FAT-fs (loop2): bogus number of reserved sectors [ 464.436337][ T6242] FAT-fs (loop2): Can't find a valid FAT filesystem [ 464.468306][ T6256] loop5: detected capacity change from 0 to 87 [ 464.501908][ T6263] loop0: detected capacity change from 0 to 87 [ 464.563066][ T6263] attempt to access beyond end of device [ 464.563066][ T6263] loop0: rw=2049, want=230, limit=87 [ 464.910515][ T6287] loop1: detected capacity change from 0 to 87 03:18:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) open(&(0x7f0000000180)='./file1\x00', 0x509000, 0xa6) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) utimes(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)) truncate(&(0x7f0000000080)='./bus\x00', 0x6) r4 = open(&(0x7f00000001c0)='./bus/file0\x00', 0x200, 0x40) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x19) sendfile(r2, r3, 0x0, 0x80000007) 03:18:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:21 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) pwritev(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000001c0)="496f6bf337d323055c33b64c38795b3a60bd7eb18d085fac14f306642706dc8d5a65", 0x22}, {&(0x7f0000000200)="e3a280d72f0648873a05b9bc02e85790ed666103ff2752cc755764f3bf446cb6dfa01b7d", 0x24}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="bc7790bd64898ce2e1cb5423c3fa2d340023c356d78a13ac4ebcdd3d4c8043a6a572f1960b44eb59c0a86ebee54d43595c0416c4302f9ba01f6fb367e9baf9a6cd7384fe679d660c4f9fcb12eb590ab3ee245458a13603a328f9aa525191eb63c5fc3dc2b74172618624251f6a352c384cd5190670e8c65bfd5474da9442bee8d71df97d812a6d01420b47", 0x8b}], 0x5, 0x101, 0x1) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x412, r1, 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0xc0303, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000340)={0xf0, 0x3f, 0x1}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000002580)='./file1\x00', 0x10) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$binfmt_elf64(r5, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x1b6) sendfile(r3, r4, 0x0, 0x8400fffffffa) 03:18:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 467.183888][ T6301] loop5: detected capacity change from 0 to 87 [ 467.185906][ T6305] loop0: detected capacity change from 0 to 87 [ 467.195123][ T6306] loop4: detected capacity change from 0 to 87 [ 467.200330][ T6307] loop2: detected capacity change from 0 to 87 03:18:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) open(&(0x7f0000000100)='./file1\x00', 0x8000, 0x1) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 467.235152][ T6306] FAT-fs (loop4): bogus number of reserved sectors [ 467.241728][ T6306] FAT-fs (loop4): Can't find a valid FAT filesystem [ 467.250596][ T6307] FAT-fs (loop2): bogus number of reserved sectors [ 467.257141][ T6307] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 467.288802][ T6305] attempt to access beyond end of device [ 467.288802][ T6305] loop0: rw=2049, want=230, limit=87 [ 467.321200][ T6338] loop1: detected capacity change from 0 to 87 03:18:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 467.335570][ T6341] loop5: detected capacity change from 0 to 87 [ 467.346954][ T6338] FAT-fs (loop1): Unrecognized mount option "/dev/snd/seq" or missing value 03:18:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='autofs\x00', 0x30811, &(0x7f0000000480)='(^(\\/{\'$*\xd5\x00') open(&(0x7f0000000340)='./file1\x00', 0x800, 0x8) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2001, 0x60) r4 = openat(r3, &(0x7f0000000000)='./bus\x00', 0x0, 0x1c1) r5 = socket$netlink(0x10, 0x3, 0x9) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/9, 0x9}], 0x2, 0x8, 0x80) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14dd42, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80000007) futimesat(r7, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={{0x77359400}}) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r4, 0x0, 0x80000007) 03:18:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:21 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) openat(r0, &(0x7f0000000180)='./file1\x00', 0x401, 0x24) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 03:18:21 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 467.477994][ T6367] loop0: detected capacity change from 0 to 87 [ 467.524823][ T6376] loop2: detected capacity change from 0 to 87 [ 467.527624][ T6375] loop5: detected capacity change from 0 to 87 [ 467.564134][ T6376] FAT-fs (loop2): bogus number of reserved sectors 03:18:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x80) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 467.570763][ T6376] FAT-fs (loop2): Can't find a valid FAT filesystem [ 467.672963][ T6398] loop0: detected capacity change from 0 to 87 [ 467.718451][ T6398] attempt to access beyond end of device [ 467.718451][ T6398] loop0: rw=2049, want=230, limit=87 [ 468.083344][ T6338] loop1: detected capacity change from 0 to 87 [ 468.091232][ T6338] FAT-fs (loop1): Unrecognized mount option "/dev/snd/seq" or missing value 03:18:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x10003, 0x100, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000a40)=ANY=[@ANYRES16], 0x30) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="1b5b00073133000000000000000000005d000000000000000008000000000000400000000000000000000000000000000000cee9eedd374e2b9ea3386c00000000380000000000000000000000000000000000000000000000000000000000000000000000000000a6d27b0ac12f1adbde56060800150040000000000000000000000000000000000000000000000000005c1ddafee0a8ae2e50486bc6df562b19ac3344d06089eec3fb6993ce4d28bf35d7f8485313d45b171b512f72fd0c73db2ddd655c34f00fb19b8c8a964c8d6ff38a9a1b0dcdab90c1b26809e3ddf73a22be56190063b969644475d2555d55"], 0x78) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r4 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x5}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000a80)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) gettid() 03:18:24 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:24 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x5, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = syz_mount_image$nfs(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x81, 0x4, &(0x7f0000000600)=[{&(0x7f0000000300)="a9d4d611ddd7fd5b92cb690f0745a22d439d841f494b38ec920215c0c9fd40c8d4241d393052301d122d95a2a7c4c357e8bca9077676ffd173539434d2e14c768c5d62a7e175c4033de39d55e3dde72b3d4c51c5b498de831039ba7d4f041ed60a6d47", 0x63}, {&(0x7f0000000380)="80c9be829c1e0266977bda27aa476fb3b683a5bcd993042b4d8a6268f1ba41e70e9ffc8bc714db006e16f495a1e1cdc4179c6d80d17a7ca856fcbcb81686374468be21daf9c7e8c1a307a3dcf5e5229cb37d89af90c193bcd884648bdea3d16ccc515185c97f16a64591c16d1e913c1823204ee108d245b76c193c00bfd8ff57822abcf9498c49d29decab90ed34b5233da969bc5e7150ee232c4f7a7793c3d69624519b8a0e25260edd03e5621238267929a58eaa05474feceecc39", 0xbc, 0x80}, {&(0x7f0000000440)="008deaa746aa790642147ae6b0273e945ed97704ef926581283e8e7720f2ad4acd0d71f20ba3934e03b42bb0db003253aa64866b16c4de7eaff5b5797e06427a2c6df66d0f07db9261274841de6dd02e5282924d4d6a8c4f6398073ac46b31bd3e1365eb233511d7f93706c6de5f3a17e79e5cbe990565a54d414b3cc1e3f560da024a24a8fd4524da88e4f9111f4f1b6cd0c79f75680b194a42d3aa1da582cbe8bc9ddf3222a250fe80ad09dd3af44482ada2ebaec4121797c85b1f470a4e9df8ffa0b4e61f5991ca98c014a77f3001a9eaf07656b8808eed7f297ac1b6c5a6a86a93aaab00f2e7e2bc5e4ab8", 0xed, 0x1000}, {&(0x7f0000000540)="fa9b227d599f05b6d5ae298ae3150de3c751eda50ef6a4427b98b0f7d16d9cc3a04f7e060d0bcfecdf809fc6783988b932c3c377572a36710410f3a1e483cfe2a1efe0ce1d3ab720a3609748e8a6b562fdcb11b10b76437c460a4f508a309e6237f9a48fbdebe8a33128160e2b9ac3c3695dc3b72c3b0da5b8a74a9b750dcd98fa1414ddd55ca9bb47655434f0217331e3", 0x91, 0x3}], 0x4000, &(0x7f0000000680)={[{'msdos\x00'}, {'msdos\x00'}, {'msdos\x00'}, {'msdos\x00'}, {}, {'msdos\x00'}, {'\'+{'}, {'msdos\x00'}, {'msdos\x00'}], [{@obj_user={'obj_user', 0x3d, '${-))'}}, {@dont_appraise}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, 'msdos\x00'}}, {@fsname={'fsname', 0x3d, 'msdos\x00'}}, {@subj_role}]}) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000740)) sendfile(r1, r2, 0x0, 0x8400fffffffa) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = syz_io_uring_complete(0x0) r6 = openat(r5, &(0x7f0000000100)='./file0\x00', 0x446840, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x8) truncate(&(0x7f0000000080)='./bus\x00', 0x6) openat(r5, &(0x7f00000001c0)='./bus\x00', 0x24200, 0x40) sendfile(r4, r6, 0x0, 0x80000007) 03:18:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:24 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 470.269063][ T6424] loop2: detected capacity change from 0 to 87 [ 470.277688][ T6424] FAT-fs (loop2): invalid media value (0x00) [ 470.283892][ T6424] FAT-fs (loop2): Can't find a valid FAT filesystem [ 470.298061][ T6430] loop0: detected capacity change from 0 to 87 [ 470.304053][ T6434] loop5: detected capacity change from 0 to 87 [ 470.308715][ T6432] loop4: detected capacity change from 0 to 87 [ 470.350964][ T6432] FAT-fs (loop4): bogus number of reserved sectors [ 470.357502][ T6432] FAT-fs (loop4): Can't find a valid FAT filesystem [ 470.366391][ C1] sd 0:0:1:0: tag#747 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.376212][ C1] sd 0:0:1:0: tag#747 CDB: opcode=0xe5 (vendor) [ 470.382509][ C1] sd 0:0:1:0: tag#747 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 470.391497][ C1] sd 0:0:1:0: tag#747 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 03:18:24 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 470.400567][ C1] sd 0:0:1:0: tag#747 CDB[20]: ba 03:18:24 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:24 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x8) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000240)='./file1\x00', 0x4000, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000180)=""/112, 0x70}], 0x2) sendfile(r3, r4, 0x0, 0x80000007) [ 470.476803][ C0] sd 0:0:1:0: tag#754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.487028][ C0] sd 0:0:1:0: tag#754 CDB: opcode=0xe5 (vendor) [ 470.493321][ C0] sd 0:0:1:0: tag#754 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 470.502287][ C0] sd 0:0:1:0: tag#754 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 470.511254][ C0] sd 0:0:1:0: tag#754 CDB[20]: ba 03:18:24 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 470.622812][ T6492] loop0: detected capacity change from 0 to 87 [ 470.700314][ T6502] loop2: detected capacity change from 0 to 87 [ 470.714081][ T6506] loop4: detected capacity change from 0 to 87 [ 470.716004][ T6502] FAT-fs (loop2): invalid media value (0x00) [ 470.726345][ T6502] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17, 0x2}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 470.768552][ T6506] FAT-fs (loop4): bogus number of reserved sectors [ 470.777314][ T6506] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x100000000}, 0x1240, 0x40, 0x0, 0x0, 0x3, 0xfffffffc}, 0xffffffffffffffff, 0x0, r1, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) accept$unix(r0, &(0x7f0000000180), &(0x7f0000000100)=0x6e) 03:18:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 471.032855][ T6545] loop2: detected capacity change from 0 to 87 [ 471.052540][ T6545] FAT-fs (loop2): invalid media value (0x00) [ 471.058606][ T6545] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x1, 0x2) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x3) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:25 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:25 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x2) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r1, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000100)=0x80) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = signalfd4(r1, &(0x7f0000000200)={[0x65c14db0]}, 0x8, 0x80000) mmap$perf(&(0x7f0000007000/0x1000)=nil, 0x1000, 0xc, 0x100010, r2, 0x10) 03:18:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)={0x58, 0x0, 0x56128f1e00bdb6dd, 0x0, 0x0, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x3, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'nr0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003f00)={0x34, r4, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="c4020000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="d801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000208000600", @ANYRES32=r3, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400050080eb0900000000082080ff010000000009080700000006000540f4000000fdff0735070000009705008106000000b6000403ffffffff3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000002000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000008000100", @ANYRES32=r3, @ANYBLOB="bc0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x2c4}, 0x1, 0x0, 0x0, 0x41854}, 0x40010) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x6) lseek(r5, 0x1200, 0x1) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000020000000000000005000000070000000100000000000000ff00000000000000070000000000000033000000000000000000000000000000000000000000000000280000000000000000"]) sendfile(r5, r6, 0x0, 0x8400fffffffa) open(&(0x7f0000000600)='./file1\x00', 0x159842, 0x2d) openat(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/exe\x00', 0x90082, 0x8f) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000007) 03:18:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 471.605813][ T6588] loop2: detected capacity change from 0 to 87 [ 471.633553][ T6588] FAT-fs (loop2): invalid media value (0x00) [ 471.639593][ T6588] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 471.656591][ T6599] loop4: detected capacity change from 0 to 87 [ 471.682074][ T6599] FAT-fs (loop4): bogus number of reserved sectors [ 471.688659][ T6599] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xff, 0x0, 0x40, 0xf8, 0x0, 0x0, 0x44000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0xde}, 0x8022, 0x9, 0x1, 0x0, 0x200000000, 0x1000, 0x5, 0x0, 0xffff, 0x0, 0x1}, 0xffffffffffffffff, 0x7, r0, 0xcd71c1e68e9a153c) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x1, 0x80, 0x6b, 0x8, 0xc3, 0x80, 0x0, 0xe000000000, 0xb0101, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x3ff, 0x8}, 0x0, 0xeb, 0xef5, 0x9, 0x800, 0x9, 0xfff, 0x0, 0x5, 0x0, 0x2}) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 471.715905][ T6593] loop0: detected capacity change from 0 to 87 03:18:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file1\x00', 0x442000, 0x80) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 471.885549][ T6642] loop0: detected capacity change from 0 to 87 [ 471.911306][ T6642] attempt to access beyond end of device [ 471.911306][ T6642] loop0: rw=2049, want=230, limit=87 [ 472.005161][ T6642] attempt to access beyond end of device [ 472.005161][ T6642] loop0: rw=0, want=106, limit=87 03:18:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2004c811}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x19, 0x8}, &(0x7f00000001c0)='./bus\x00', 0x18, 0x0, 0x12345}, 0x100) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) write$P9_RAUTH(r0, &(0x7f0000000100)={0x14, 0x67, 0x1, {0x40, 0x3, 0x4}}, 0x14) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='\x00', 0x1000, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="4adc7ff746f5bff5cfe577c3095fa773778b9a16c0ee7c0a235f59df707d5b3b5a1de06aea9dd0b77c6a6cd6fdcdde1cf5a4ab2c9e68801fc3807b226c9c9fae58109a220649cba037f936ad518530fe369aa9d0c2", 0x55, 0xffff}, {&(0x7f0000000240)="a9297f3cee691f8477614a4091366408debe2844d63de67707b4bed645329482285ab7a7ac8c5c5709b8eeb6a5b9d95733fb3c8323a74aea0c9b8be5fee889080a4956851e1d6d2b416412f8e4875c1595e015b93c4b4c0c2a8d73ec254e", 0x5e, 0x9}], 0x41000, &(0x7f0000000340)={[{@dots}, {@dots}, {@fat=@uid={'uid', 0x3d, r2}}, {@nodots}, {@nodots}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_gt={'euid>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x38, 0x38, 0x66, 0x38, 0x62, 0x34, 0x66], 0x2d, [0x2, 0x37, 0x64, 0x38], 0x2d, [0x30, 0x34, 0x34, 0x61], 0x2d, [0x35, 0x62, 0x33, 0x30], 0x2d, [0x33, 0x62, 0x31, 0x64, 0x31, 0x36, 0x35, 0x64]}}}, {@dont_hash}]}) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffa) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r6, r7, 0x0, 0x80000007) 03:18:26 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "c5b776e43d40c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000050b40)=ANY=[@ANYRES64=0x0, @ANYBLOB="080000000000000004000000000000000002fc405cdcaed166bf00000000000000060000000000000000000100688f0a2f40000000ffff00000000000001000000010088ee895e693287060000000000000500000000001800000000000000000000e7ff00000000"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000050bc0)={0x0, 0x0, "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", "5584756abaa627877c7fbc9514be1a3760b7990800e42ef56217adf433045dcff5dbf804121e0347e4c91070b31f85dafe3a80d9a0418c616d57e81820664ea27ccfd8bd6bb5256bfe232c6146c66465aed7cdc395c070edb12fb48bf1d0da4f7694fd9fbeed3348fa958b05b34d0d8d6465fc0db3c584d02fa0257303f15ea4438176a7eaf43c942048bb981abd40e85e3735ba2b957a03eba15964a178635b29637a46abc85052dd20a529c4c14b603768c5c0822fc5758ac2739787202680c87df141b86e8eaea6825c30d244682fa69ec5af9ccf3d72d66317decd0f29c5b7da2f5ab658242c8cffbb780d229b2d54ba16c5676b702d0046d16d4b500d255ed2c5a31e0782dd8d8665e00b29887e6e7dc7311439e4a1645102011029b664028f126db8e47fe8d667fb797e7505436f89d8dff890e1d74602fe94b86d892157320a87ae68a947a621c607ed2b7aa18d41a44753a5ff851180357760ede63ed4111772b53cd361c111eec1b86965a53191e53b5f2e7b83c9672c46638b02d3934e297b01f96c6406e8d2457dd34bbdbc64a177188f5062b3e63393d97803c05c66e7cbfdeed54a4d9cb8f9a15692b9a0e3d2564806a9354fe43581c7fa6c7d807b36f93858ce8188f71fd6d552fb7f6f52edb14ea17f10f534a4f907909deb25b9bea73429333b605e096ad54bb3d7ecbb19a69c5d52ae6fa5ee6beac41bfc974df317348d636cde22ce9c243955544fd13eabb74177f423b9bdecaa076f717c1c8408cad95d98aece95771b35c23e0c8d78419c324fd427930dd701c512b486c2d0b76364cd685117d2d9319255e437fc81c193468518c6f06b4d5fabf8cf2602ac5eed7b2c7c05cd164a357a2446f56e191857e43235796e0522c615385a802a96f85963755f4cdad7e066e866010e1427cabd8d5ad9bcef01f3accb76c88d94210c2c3dfa4e86df487a593eddb1982a297c8b6ddc86790127a9ca7ca6094d9e8290437c4fa3cadbe9e9cfd588d0e37c88eabebd29fe22ad6a22c833f63f00e5f9d7a58b35a059b0cdbfb64779fb225a73ea3cae2d1eddb9c3aae339a7dc3b6701c56eedb030cf14ceb32c362553645d0e7546f903ee2f51ba56bc4bb91dd14012f61945ef1e777fe990311236161042cb20d8084b33fbc6ac638744fa79183be72f9ac05fdcd4e20c1afa9df2676e9d873723d391ceae22841e2a3eb7b4b7fd9fa0c81624139f2bd07677e829664ded34c098d11c91cd08ce2773ecde26d508dcd2fcd6cd089d74e78497cb59a8e459098e883b3bbc624b6f904eef09be33189bd63266d501fb82f6ef1e266d030931dc74b22cc30bcfbc57a8683f7cb2c2af9ddfb95ecf9d9867c3df132f21d89a33d9e2bfbfff190af7214c75d1a81b1f0df88ae42a2230e6f4f2e8f614f1b2a3a15d1267f5eee9878d44a637b908d662092670d912f87aba95b3650175f247c00dbe49cc1722ff14059596ae98b4a6ce9b5646ce157b8be54e2890a8b7ca2870bff260989956e5531c78f021cefd5bd0cee900490b44ac92043082af3b1ce73432e1848dec6fce81c24df7df15998ab461b4bcc586406ff17dbea9577f920685f6a856e1400a47cc5d187a7ee659a583d1f6fe9af56acb606280ea5d352aeab34e4978044cabf49caa4ce949a97fe06ab5106cf256a38cd33424a022a3d441bab5da2f1cb77f9bf167d0569a17f69406b68fcaefdfa8c9d9e6068d238c867221dcc7f4c4eb94480b9d8a89f54c8aa102312b3245351e4cf3e2d78735dbd2b62f46d7b5173f04de1fe8e89fb46cdc7f47c5ae8950614474c9cf079de5156aa0008b86b1deb599717ce13f7de1a87f3fe5429e02c51bbbeddafeee646b3669972257861404f7139d395070f1c49ff6cb0e6a9697eccd39af9621db2e389ac920b643b926af772a216555af14bb5618574f35f850713d1c3ee250767a2d0469fde8c3d7fbb5c8756fc1abd37bf5109d644798edc29cd15e82c7b6ed498db4fd6ae74ef2cf07e52966910cc6072f58af43269b7ee43963287fd7a8c446863c10ee7df2ec333f842551ae58524fdfda588b3e5a55a24541cb1ec7c2de473ec47e43813a76279c0c7075d1a80e7a7a01b35b7afdaec4cb91f431bdf32121554ef46ffa0bbfb36d81f18097627225773f9906cfcb1c091bed40006116d707c5226fe6b0243a60b5136d1430217870dd61c82d509e6b3f10ad5231d940c152ad03811a73bf245dc1c534c5e4fc4a6336135288a41be16a3f2627fa912c386705b5529a6d6b7dfd8ddab7c03cdac713e840712b2adcb49238a7f1e5b619bab18aad9ed8640d7fc568943d314378e62513e2ab37993e0aa51130545abde93b7c33c0390e2339f9855bf2b6b29f3fa60f178b10cd39d04f3cda4b91bb6bc28e75424b3fe37508200cd1a831aa42259fa45c20c7c54f32aeb2ba80f416ce6d01a9ce72e1dd81e6b036e25088977ce03c5c2e986901157839111c06d8d0d851936bb0a4ec66aac476b210768590db09dd6bcbd42f5f240b78b20a100dc5b5bc0394c94b8054bba9fa39c19b883267316c721ebbb6759d40ee293f5edc46fa37af9cfc63d4e90917932f2ba4f65ecf63c9b69e37a5834b9ef16a92df1128a7bc84803f08ca82cf7cd0f8a9440447e27acbecd3e234995f1bf5cd5fd14f80904477ac2852e171b7b08d9247d1196ec6f5979c5a09ed841a030f45e12381172f32dd515b7c7ace8e1f530e9d24cd8dab2edb001c2a8b4779bad1e55294a24dd37a6edfaae1abc611f2f7feb3056cf7111bd649cc5aa28e196e589149eee714fab99fcda9c51eaf89272e647b2fefb5c2a2e8f7ba6cd628756ea94d0841d34f4d6929c9102c025150084740f7466d6add9e59c2c35fe7120229a9b01639f65d38a04f63a7dcc3ac52113eb8362f62bc1d080be26e21d7beae104c407a8cba50f44579aa369dff38af13678a36b0d3aeef08b1299eafbf4fe7b7dc5ec01fd5b352f1851f0593a6a08f0b525feb8460a88a19e2fbbfd90e994dec85ece5ea44655dba81900f43c9e5bd997cabe1cce680a209b4540ef07f311022f09e409a03f3ae8748449fdb2360433f60d00a15e966137a961364ae051fe96f899334c41f5fb9e395e0b56ec4f8b3f6b85ec00a55de279b8e561f1b0dd6a2c6852fa6a5ea2311cbcc61f76a33079c9833c126871f2a8de0deb3b054fdb7ed93cc3f95cf8aad9ffe1f1cb7f37bfa626ff3043fbef3728ff478415420f93b229f44228b8901d82c6b139c0d02425d1a22357a5948e33882d844ac846ea112df01c3f9382a4531291fb2da544fff58a55f472f900324363030a1a743a09f15b0e82584910f81ab00827461cd8a1669135e6aedd546afb1bd2f5c50f334f3caab07bd5c70f94915648eaeab473f2dc943482647876e1cab97c92da04cc5b96625acc3bc09be13e0b751a6b1b8e3da8849a3521b4236f9d257783ee77c445e6fff35aaf2b01b3e912297fad51c2f30d59bb96833d7390b02da85d069c3ea082414a9c417300f8be6239f48b7a9018dc4872f58cd01c013b118a867266ae4ee4e0aabdd14e4a89e4e5d6a313a302a228cd640a26964635d35db7afe3b46423bf4b433544699e10bc7ecfed3222200e70b2e199ef727f78012f303b5dff7b0915bcc73b47f68405ddef122a6ed71a21d2a3a0d653e2828e008d412176c472b7875c74eac4f706452729f59fab2d345f2ef1df7291ccaff795e49594437c1b59d1893bc0e8026cba3e8520d93042cb7e145dceac0f48cd3b5671e70701dcd1efedcda8f88a1d341be11f01074633e4bfd687a8d37fa6cdd6c02e9687a44607732c1402502123b18ea4bc3dc97437b23e5ee7a5195967711c3c9ab0593b9af2ac87dc121a64e1d1b9f68bd5b15dfac8cd0c6bd9054a5e4168f2df0d8f456a829339de778cd996704b3c23961ed07018e45328d6a7ce72acd0eb2c8f37e96e835490bfc60d4d62e83c31718715bb4aa0b3aeeeb6c921450efc033627b54f33d2fd789d1b349449c111b92dec064ad4a2ab82df4ff34da06876beabed0d556426e590bbe064dfa0eb2d57f06f32ece5fc225dbe4ba53eb0d64d6e266189b4fd3cd81148f6219b4a5ccd7a5ca5df5523a0412b83bc93767c90a0425c097b91773cec9c0469fe3f81ed104df87d04ac56ccd77a33b21be19a4f877ef4292b8b704dd61ad519f12c909ee896c855dca48cf76e04620aa12d758eacaa77a202d8b776eee90f537ae058fc027285759b0daf9ddf40bc6e8682dbd3ac73632eafc61a565f2f572814d5e64f7f6467f9689ac3a82b27c40399310cf61d70b3a7748694c60fd4467385d2d02685e314ac3c99ac5180be5c56494ab1039869d9ce9da1f9fb22f4e97af84c223dcd5e4d2aa32fef5caf45eb92a814b04b0c3333a46e6cf913878c2d9d1141982a5d6c854ef0a068064fa304c6070b15e6ce7b1fa042f75109ab7da0f3901eccd192bc3e03a3bbd50bad8af2e2d5941ac26dfcba9803cec03cc60de2cef499fa726e8f64767852ab991f903ceacde0c21ffd9d9f19e3c91f1e5423ef2e7702e7ef76a17493c458bfdf6cc7fa57bbbdcc8824cd3c6ca958cfd6c8f74032e2b39a3fbd21cb40d24594259b4ca7bb62b3ad945284598c8767ef9f7b9ce9b4f893b6f7c4cb847a64e3aada2ce6d83aa7bba3cd1fae0aff9daea236c44f2a1424cce28baac9ae8d2bac38c314e7896fcced43ec6310936dd7d78c48e96cc066bb3b2c7afa243f9b2c986ab6f78eddfec5568d8b30ac6bcc701da272868dcd687c3e850b872fc95274de85ed66b052d55b93fe791589fbbd286f23bca6ff79020379e352183002355b9d9804b89a247a14d52db8e4d8d3e352e79ed2743aa637771f653c7b8bd8b0e2d8616bbf954de60ca50271210a7c61dbdc799129cb80a1ca7ecbef77ee0cd206c9b5417c127f945d37e9354d9d130e48c18587f0a5be1bf2f60a9a0281630bb1cd0901025ca3d3a96f443a82093b36e2497280c19fb695eaf4a0cde25af15e28ee34b709af5f059692d34e76b8e4bff5e52170e50200c957384a8c53e803e7a41a96004b3649db41aa4b9f36127bb155e32327ac244af45025e9566ef8963e7b87656b99a5cb56e9871ec8ee6d52df5146eec9e65eb6e2c4bb960cff9895c46733b5cdaa4a8166a97934a27c3ad73dd919a485b1bd23e8b83bca845c3a262856d4b0a46af345b25cc47d8bcbf20e9fd74588bb0992152cb63712eb1731f3770332344e286fcd5e4c376a616fbf20372debebf8e7dd326f37a4df5fedb6597d0233e2b9443e8197bcd0558a6a979e5fc957d360bf1d060fb32a197bf17b90b6ba2dcd2312f39893a00dc87886bd2966da7209cf0ef51ba86d93e1b2c9e68fa3898de282110e8"}) r14 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000000a40)={0x0, [{r16}, {r16, r17}, {r16, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15}, {r15, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r16}, {r15, r17}, {r16, r17}, {r16, r17}, {r15}, {r15, r17}, {r16, r17}, {r16}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16}, {0x0, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15}, {0x0, r17}, {r15, r17}, {r16, r17}, {r16}, {0x0, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {}, {0x0, r17}, {r15, r17}, {r16}, {0x0, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15}, {r15, r17}, {r16, r17}, {r16, r17}, {r16}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {r16}, {r16}, {r15, r17}, {r15, r17}, {r16}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16}, {r15, r17}, {r16}, {r15, r17}, {r16, r17}, {r15}, {r16, r17}, {r15}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}], 0x9, "c5b776e43d40c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r17}, {0x0, r17}, {r16}, {r16}, {r16, r17}, {}, {}, {}, {}, {r16, r17}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {}, {r20, r17}, {0x0, r17}, {}, {}, {0x0, r22}, {0x0, r17}, {r16}, {0x0, r17}, {0x0, r17}, {r16}, {0x0, r17}, {r15}, {}, {r15}, {0x0, r17}, {}, {}, {r15, r17}, {r16}, {}, {0x0, r17}, {r16, r17}, {0x0, r17}, {r15}, {}, {0x0, r17}, {r16}, {}, {0x0, r17}, {r16, r11}, {0x0, r17}, {r16}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {r15}, {}, {r16}, {r15}, {}, {r16, r17}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {r15, r17}, {}, {r15}, {}, {}, {0x0, r17}, {}, {r16}, {r15}, {r18}, {}, {}, {0x0, r17}, {r16}, {}, {}, {0x0, r17}, {r15}, {}, {0x0, r17}, {}, {r15, r17}, {}, {}, {0x0, r17}, {}, {r15}, {0x0, r17}, {}, {r16}, {0x0, r17}, {0x0, r17}, {r15}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {r15}, {r15, r17}, {}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {}, {r15}, {r15, r17}, {}, {}, {0x0, r17}, {0x0, r17}, {0x0, r10}, {r16, r17}, {}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {}, {r16}, {r16}, {}, {0x0, r17}, {r15}, {0x0, r17}, {r16, r17}, {r15}, {0x0, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r16}, {r15}, {}, {}, {}, {0x0, r17}, {r15, r17}, {r16}, {}, {0x0, r17}, {}, {r16}, {0x0, r17}, {}, {}, {r15}, {r15}, {0x0, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r15}, {}, {r15}, {0x0, r17}, {r16}, {r15, r17}, {r15, r17}, {0x0, r21}, {0x0, r17}, {r15}, {}, {}, {r16}, {r15}, {}, {r9}, {r16, r19}, {0x0, r23}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {r16, r17}, {r15, r17}, {r16}, {r16, r17}, {}, {}, {}, {}, {}, {r16}, {}, {r15, r17}, {}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r15}, {r16}, {r16}, {}, {}, {r16}, {}, {0x0, r17}, {r15, r17}, {r15}, {}, {0x0, r17}, {0x0, r17}, {}, {r16, r17}, {r24}, {}, {r15}, {r16}, {r15, r17}, {r16, r17}, {r16}, {0x0, r17}, {}, {}, {}, {r15, r17}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16}, {r16}, {r15}, {}, {r16, r17}, {r16}, {0x0, r17}, {}, {}, {0x0, r17}, {r15, r17}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000022c0)={r17, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051bc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {r13, r17}], 0x1}) r25 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r25, 0x1) lseek(r25, 0x1200, 0x0) r26 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r25, r26, 0x0, 0x8400fffffffa) 03:18:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000100)='./bus\x00', 0x4) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 472.508002][ T6670] loop2: detected capacity change from 0 to 87 [ 472.521515][ T6671] loop0: detected capacity change from 0 to 87 [ 472.534074][ T6670] FAT-fs (loop2): invalid media value (0x00) [ 472.535805][ T6676] loop1: detected capacity change from 0 to 87 [ 472.540105][ T6670] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:26 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0400159a90000000666174000000000002f22bac09f8015a8b33a46f3ff5361222129121a66aa88d6e00709ca08259437eee009c4f166f76fcc370f5b553fc7a893521bf13832e51c032bb644e55f8574cffda6a5561cdfc2cbe86a155f3edad2d6ddb3a200a46b35aa781c009b9a1bf407c860ad607556b40be7d992ecdb85268285080502d801ff1f00d6aa9b09399b50000000000e16cdebc0e", 0x9b}], 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x20000000000000, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x14) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = fsmount(r1, 0x0, 0x70) write$P9_RSETATTR(r2, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) 03:18:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 472.686571][ T6716] loop4: detected capacity change from 0 to 87 [ 472.705166][ T6721] loop0: detected capacity change from 0 to 87 [ 472.725458][ T6716] FAT-fs (loop4): bogus number of reserved sectors [ 472.732021][ T6716] FAT-fs (loop4): Can't find a valid FAT filesystem [ 472.784094][ T6721] attempt to access beyond end of device [ 472.784094][ T6721] loop0: rw=2049, want=230, limit=87 [ 473.347101][ T6676] loop1: detected capacity change from 0 to 87 03:18:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:27 executing program 5: sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x800, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x47}}}}, [@NL80211_ATTR_FRAME={0xc4, 0x33, @mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_a, @random="32ff1c32fdaa", {0x2, 0xa6c}}, @ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x2080, 0x0, {0x0, 0xf, @random="d90e7da3f80af67b5e81f61e119eff"}, @val={0x1, 0x6, [{0x24}, {0x36, 0x1}, {0xc}, {0xb}, {0x16, 0x1}, {0x5}]}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x2, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x8, 0xf1e6, 0x5}}, [{0xdd, 0x69, "c0023608836ec0fa0b637c6b2823b66519ea7433cbcf414c97f114bacaf6a654e950bc1c0709d99a1f153b8981a039cd7d1336194af06b411640ecdea1f07e45bea73417b13ef89c93cadc840d25f389315dfb6020513307a64c63a445341796b62c667bfb7abf8b70"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="a30c0a826ae0"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x6ef, 0x33, @data_frame={@no_qos=@type10={{0x0, 0x2, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x80}, @from_mac, @device_a, @broadcast, {0x5, 0x9}}, @random="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"}}]}, 0x800}, 0x1, 0x0, 0x0, 0x8080}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)={0x16, 0x6f, 0x2, {0x1, [{0x2, 0x1, 0x6}]}}, 0x16) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:27 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) lseek(r0, 0x40000001200, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) r6 = syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000340)='./file1\x00', 0xff, 0x1, &(0x7f0000000440)=[{&(0x7f0000000380)="15ede0612cf24a8419686e44e515370f67026348d68768300fb4713615422b0be7e58e04ee9a0737c54cd29ff09957f79cf13618c32dad64c70010123f57a92b3fb3c645ff24875782d89c63a3b8ae7190d9e2f12bab230a84ce2376b9b34a9057a568b7bb18f3f90c41adf9950a9e4febcc15a8b26c037c7338718698134c9009d01912", 0x84, 0x11}], 0x2088, &(0x7f0000000480)={[], [{@obj_type={'obj_type', 0x3d, '\\'}}, {@euid_gt}]}) fsetxattr$security_capability(r6, &(0x7f00000004c0), &(0x7f0000000500)=@v2={0x2000000, [{0x8000, 0x32f}, {0x7f3, 0x8}]}, 0x14, 0x1) sendfile(r4, r5, 0x0, 0x80000007) getdents64(r3, &(0x7f0000000540)=""/4096, 0x1000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000001c0)={{0x85}, 0x0, 0x8, 0x100, {0x4, 0xf3}, 0x1, 0x6}) 03:18:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xaea1, 0xb, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 473.545076][ T6757] loop1: detected capacity change from 0 to 87 [ 473.551013][ T6758] loop0: detected capacity change from 0 to 87 [ 473.564229][ T6757] FAT-fs (loop1): Unrecognized mount option "./file1" or missing value [ 473.570997][ T6766] loop2: detected capacity change from 0 to 87 [ 473.581070][ T6766] FAT-fs (loop2): invalid media value (0x00) [ 473.587210][ T6766] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x30080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x40101) fchmodat(r1, &(0x7f0000000180)='./file1\x00', 0x40) 03:18:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 473.637028][ T6758] attempt to access beyond end of device [ 473.637028][ T6758] loop0: rw=2049, want=230, limit=87 03:18:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:28 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x9) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 473.720169][ T6795] loop4: detected capacity change from 0 to 87 [ 473.745273][ T6795] FAT-fs (loop4): bogus number of reserved sectors [ 473.751852][ T6795] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:28 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 473.806939][ T6805] loop0: detected capacity change from 0 to 87 [ 473.875891][ T6805] attempt to access beyond end of device [ 473.875891][ T6805] loop0: rw=2049, want=230, limit=87 [ 474.380250][ T6832] loop1: detected capacity change from 0 to 87 [ 474.399507][ T6832] FAT-fs (loop1): Unrecognized mount option "./file1" or missing value 03:18:28 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:28 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:28 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/event_source', 0x404000, 0x10) lseek(r0, 0x200, 0x3) open(&(0x7f0000000100)='./bus\x00', 0x90000, 0x100) truncate(&(0x7f0000000080)='./bus\x00', 0x6) r5 = openat$cgroup_subtree(r2, &(0x7f0000000180), 0x2, 0x0) r6 = socket$inet(0x2, 0x6, 0xc9f1) splice(r5, &(0x7f00000001c0)=0xdd1b, r6, &(0x7f0000000200)=0xffffffffffff4cca, 0x101, 0x9) sendfile(r3, r4, 0x0, 0x80000007) 03:18:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)=@v2={0x2000000, [{0xffff, 0x63e0}, {0x85, 0x3}]}, 0x14, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 474.638740][ T6850] loop2: detected capacity change from 0 to 87 [ 474.651521][ T6855] loop1: detected capacity change from 0 to 87 [ 474.666998][ T6858] loop4: detected capacity change from 0 to 87 [ 474.671815][ T6856] loop0: detected capacity change from 0 to 87 [ 474.682541][ T6850] FAT-fs (loop2): bogus number of FAT sectors 03:18:28 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 474.688766][ T6850] FAT-fs (loop2): Can't find a valid FAT filesystem [ 474.716139][ T6858] FAT-fs (loop4): bogus number of reserved sectors [ 474.722728][ T6858] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) chdir(&(0x7f0000000080)='./file1\x00') lseek(r0, 0xc402, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 474.751275][ T6856] attempt to access beyond end of device [ 474.751275][ T6856] loop0: rw=2049, want=230, limit=87 03:18:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:29 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') setrlimit(0xb, &(0x7f00000009c0)) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000000000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) tkill(r1, 0x14) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=@sha1={0x1, "72f218dd803cc44e5667bb7b7758f003621f38f8"}, 0x15, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x40, 0x11) ftruncate(r4, 0x1) lseek(r4, 0x1200, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r0, r0, &(0x7f0000000200)=0x6b0, 0x5) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 474.877001][ T6893] loop1: detected capacity change from 0 to 87 03:18:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 474.952414][ T6907] loop0: detected capacity change from 0 to 87 03:18:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file1\x00', 0x100400, 0x18028b67d3c395c7) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) io_setup(0x80, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x50f, r0, &(0x7f0000000180)="16e5e1ec7e1ea04efc2527e3008d2acdcb4bb2a3c42c6bfa7932708b58e7b10a9c5e2307c60da1837fc3e62e6f8af7a82bcc5d7a7135f1ebdce3cb649695c1accbe16a2ab0db25034b1880061e002aea22506da221c6a0ec1e1c017f88c69a6d11b1a3a970d2dcaf12198b9fc20c5ce8dcbeedf2ab87dc25456b1463631fda7e9dfa8dbacf020f5a1d3a42bc320a51c4f59502b18388cad5ce4f728fedac7e0b98534ba4401002ec", 0xa8, 0x3, 0x0, 0x3, r1}]) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x10000, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000300)={0x0, 0x80, 0x6, 0x4, 0x5, 0x80, 0x0, 0x3, 0x1091b, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x70, 0x4, @perf_config_ext={0x4, 0x80000001}, 0x12, 0x4, 0x4, 0x1, 0x0, 0x1000, 0x4, 0x0, 0x5, 0x0, 0x10003}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x470500, 0x0) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) 03:18:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:29 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004ffc0)={0x400, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "d00474da1fdd9e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050fc0)={0x0, ""/256, 0x0, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000a40)={0x0, [{r5}, {r5, r6}, {r5, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r4, r6}, {r5}, {r4, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r5}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r5}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r5}, {r5, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r4}, {r5, r6}, {r5}, {r5, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {}, {r4, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {0x0, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r4}, {r4, r6}, {r5, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r5}, {r4, r6}, {r5, r6}, {r5, r6}, {r4}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {0x0, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r5}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {r5}, {0x0, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {}, {0x0, r6}, {r4, r6}, {r5}, {0x0, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r4, r6}, {0x0, r6}, {r4}, {r5, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r4}, {r4, r6}, {r5, r6}, {r5, r6}, {r5}, {r4, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {r5}, {r5}, {r4, r6}, {r4, r6}, {r5}, {r4, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r5}, {r5, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r5}, {r4, r6}, {r5, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {r4, r6}, {r5}, {r4, r6}, {r5, r6}, {r4}, {r5, r6}, {r4}, {r5, r6}, {r4, r6}, {r4, r6}, {r5, r6}], 0x9, "c5b776e43d40c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r6}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {}, {r9, r6}, {0x0, r6}, {}, {}, {0x0, r11}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r4, r6}, {}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {r7}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {r5}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r10}, {0x0, r6}, {r4}, {}, {}, {r5}, {r4}, {}, {r4}, {r5, r8}, {0x0, r12}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r4, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {r5}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {}, {0x0, r6}, {r4, r6}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r13}, {}, {r4}, {r5}, {r4, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}], 0x1, "2156816c73038c"}) r14 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000000a40)={0x0, [{r16}, {r16, r17}, {r16, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15}, {r15, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r16}, {r15, r17}, {r16, r17}, {r16, r17}, {r15}, {r15, r17}, {r16, r17}, {r16}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16}, {0x0, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15}, {0x0, r17}, {r15, r17}, {r16, r17}, {r16}, {0x0, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {}, {0x0, r17}, {r15, r17}, {r16}, {0x0, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15}, {r15, r17}, {r16, r17}, {r16, r17}, {r16}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {r16}, {r16}, {r15, r17}, {r15, r17}, {r16}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16}, {r15, r17}, {r16, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16}, {r15, r17}, {r16}, {r15, r17}, {r16, r17}, {r15}, {r16, r17}, {r15}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}], 0x9, "c5b776e43d40c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r17}, {0x0, r17}, {r16}, {r16}, {r16, r17}, {}, {}, {}, {}, {r16, r17}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {}, {r20, r17}, {0x0, r17}, {}, {}, {0x0, r22}, {0x0, r17}, {r16}, {0x0, r17}, {0x0, r17}, {r16}, {0x0, r17}, {r15}, {}, {r15}, {0x0, r17}, {}, {}, {r15, r17}, {r16}, {}, {0x0, r17}, {r16, r17}, {0x0, r17}, {r15}, {}, {0x0, r17}, {r16}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r16}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {r15}, {}, {r16}, {r15}, {}, {r16, r17}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {r15, r17}, {}, {r15}, {}, {}, {0x0, r17}, {}, {r16}, {r15}, {r18}, {}, {}, {0x0, r17}, {r16}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {0x0, r17}, {}, {r15, r17}, {}, {}, {0x0, r17}, {}, {r15}, {0x0, r17}, {}, {r16}, {0x0, r17}, {0x0, r17}, {r15}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {r15}, {r15, r17}, {}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {}, {r15}, {r15, r17}, {}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {}, {r16}, {r16}, {}, {0x0, r17}, {r15}, {0x0, r17}, {r16, r17}, {r15}, {0x0, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r16}, {r15}, {}, {}, {}, {0x0, r17}, {r15, r17}, {r16}, {}, {0x0, r17}, {}, {r16}, {0x0, r17}, {}, {}, {r15}, {r15}, {0x0, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {r15}, {}, {r15}, {0x0, r17}, {r16}, {r15, r17}, {r15, r17}, {0x0, r21}, {0x0, r17}, {r15}, {}, {}, {r16}, {r15}, {}, {r15}, {r16, r19}, {0x0, r23}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {r16, r17}, {r15, r17}, {r16}, {r16, r17}, {}, {}, {}, {}, {}, {r16}, {}, {r15, r17}, {}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r15}, {r16}, {r16}, {}, {}, {r16}, {}, {0x0, r17}, {r15, r17}, {r15}, {}, {0x0, r17}, {0x0, r17}, {}, {r16, r17}, {r24}, {}, {r15}, {r16}, {r15, r17}, {r16, r17}, {r16}, {0x0, r17}, {}, {}, {}, {r15, r17}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16}, {r16}, {r15}, {0x0, r17}, {r16, r17}, {r16}, {0x0, r17}, {}, {}, {0x0, r17}, {r15, r17}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000022c0)={r17, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000511c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {0x0, r2}, {}, {r4, r17}], 0x0, "ef6395db990991"}) 03:18:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 475.529012][ T6934] loop1: detected capacity change from 0 to 87 [ 475.529130][ T6932] loop2: detected capacity change from 0 to 87 03:18:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 475.585629][ T6932] FAT-fs (loop2): bogus number of FAT sectors [ 475.591828][ T6932] FAT-fs (loop2): Can't find a valid FAT filesystem 03:18:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6401, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f, 0x300, 0x70bd2b, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x25}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40000e0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 475.632041][ T6956] loop4: detected capacity change from 0 to 87 [ 475.650181][ T6956] FAT-fs (loop4): bogus number of reserved sectors [ 475.656766][ T6956] FAT-fs (loop4): Can't find a valid FAT filesystem [ 475.748058][ T6976] loop1: detected capacity change from 0 to 87 03:18:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6401, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f, 0x300, 0x70bd2b, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x25}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40000e0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:32 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:32 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x4c) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) creat(&(0x7f0000000100)='./bus/file0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "2156816c73038c"}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000a40)={0x0, [{r4}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4}, {r4}, {r3, r5}, {r3, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}], 0x9, "c5b776e43d40c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r5}, {0x0, r5}, {r4}, {r4}, {r4, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {}, {r8, r5}, {0x0, r5}, {}, {}, {0x0, r10}, {0x0, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r4}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {r4}, {}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3}, {}, {0x0, r5}, {r4}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {r3}, {}, {r4}, {r3}, {}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {r3, r5}, {}, {r3}, {}, {}, {0x0, r5}, {}, {r4}, {r3}, {r6}, {}, {}, {0x0, r5}, {r4}, {}, {}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {}, {r3, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {r3}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r3}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4}, {}, {0x0, r5}, {r3}, {0x0, r5}, {r4, r5}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {r3}, {}, {}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {r4}, {r3, r5}, {r3, r5}, {0x0, r9}, {0x0, r5}, {r3}, {}, {}, {r4}, {r3}, {}, {r3}, {r4, r7}, {0x0, r11}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {r3, r5}, {r4}, {r4, r5}, {}, {}, {}, {}, {}, {r4}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r3}, {r4}, {r4}, {}, {}, {r4}, {}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {r12}, {}, {r3}, {r4}, {r3, r5}, {r4, r5}, {r4}, {0x0, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4}, {r4}, {r3}, {0x0, r5}, {r4, r5}, {r4}, {0x0, r5}, {}, {}, {0x0, r5}, {r3, r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000022c0)={r5, 0x0, "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", "4feca7fa9168a8293401a96e62ec0e9dee055549c8c7b3c3cb7ed8f2201f610452905374f5a48d816fb7491d0643f38df433421bcaee589e25f28e92f556a2de36592b5c9850ff20fb057bda9913b2510c57aafb5eaefc00d34677c1e0e750628c24ed30fc6a70098594e9e704915cd37ec5459441f114b73e15503b5ef8be7076591393d1696b02def74e5efe7c99f5357353faf9287d01e1d7e9e9c0478395577b2a1fd6462450b01e12b408bb087f201090345c675d8d350739e09f90ee37c5f1af68a6a5e301f134eb5f3b2e196affb62f811c48ed81d405eb257be4a357bf47a0d7b6df80816418fca7a234a878a8556f3c67f487c013f3526da64e6282efb39583b02ca0c4b697f40c33b8ac009d599c7d03a313684ee64cb9ea698a5d43afbe583d3642757a0b35be84bc07a13f073721548404e38ef630611899d41a01a130e795a11192a00148db85d2c9f1b37d3f4420ac0a48b1f5a4c419b289f942ce0ac8bf522073891009429765a192bb7e25870068849ad6d1c634aa2e4c39c013c68b304b6ab909b7e841ed74fcd72deb8de05b917e462c96894a456df2ccd23ce648fbc0d8f9246c58d92cb454f990f1eb93c19b3af62c85dc22b4ede579db127dd276680ff3920003c6d5e0e6ac0a394a61073749f85c78268c26b05bb571107debc29c983c3faf7e757c797f9d5dbf290153c93f333a57eaff7e6dbcd3992658fd97b99ebdfa489f01b46e6d9237a1415d3ede9196df916da422c4dc5dde8a31484d901c73845518c7531624060a388f2c8ba5653d0df75afbd497d5876dd06c909431a2d938778fe3317e785f7ec16b066189d173d6e346f910a62219dd5b78d0adc8d63e495b6407b0284f78fe9818d38f7215ecf262022a61f969f4220ff31b2b8de9f4521feecd789dbb416c032f917989e990ac9849de9890533231584825305bb1794ba870235df7bfff247c3844f6f7c1ab409b2d38c17d17e11d7d21e7fd32a5c08a166de1b311c1633f20a6bfc48b204e08e23c62be94515d051ecd1ccb723928efabd62408c0a69029c40b7713409d791329983ebd000fd71888de00477819ef514d0cf2bb86eddce32a5ab564f546d3c533293e92a2a53383e60ae70321e082cbcaf1a8d23c2fdc140e0c4d913a12f0786f7b94abf66ee34dab0f460b0c27ca55099ffd307d0f7edddd0dd3851bf1b6cc8be536329400671314441c32014e880bcaf079b1bda7c0727ad97c74c031242595144e713b859327bcf15609d1e88ff7282086e6699aa8fb5a3047a0307177eb838007664cb8bce29deac5328b1c8a91f474ceb0618107b0709d68d23aa3626ff06c8ad5e7f002ce2f44f897176b4bbb49dec49d620fd25f4304214f82cc7b91514b170fff4a817706abd70a2f442a05f1242ad7ba6b7e4892fe28ad49b866be79f51c92fa8d78cd0f0d0637eb3ac2e56c02c5f311f99fc8041ba09c826e46752e70c1e0a000c8ef61fdd11e74e8d9d4c9f9ff1e784fb06dcd48111f4d1a3cfbf25617592ef1a0ec91f9ceea2976519ff6e5f70d2a94cba377ac630f4a3f62223f091e6bec50a9a436daa48d23d9ebff6b8c99a4a0263709547282fbc4982d19786f133e8e1a854aa3c3260c9034b57a3d5d6765954290cbb6e87dfb6f0ff5875223f51dbcf1087868eac4784309a9ef7a66b285deac377e4ea34b4e04fff26ed7ee8475d27a5e6228414a31a878edbdd3f71db2245fee9ae602d36aac035eadbe7340bd075732e2525e30af39761f9b7f1fc3b5cb40b785a7972560f3bff1c24ecfbcba2aed9dd690b82e835fc3030e2f9c531351fab1f5065404fef8967a5e12a5c4420af2161ce9ec18d24143f95de21023d2a1043fe99520c15c3ec2f1bc112bb7936fd555ce3aea138359750ae7d2175ed8ffbe1b65f7090c0f87a38a7a3735a2f71c02ad538177f4db293a91af2e32c4a458c934d3ffeb3f9ad3f79f1e28aa1e3c49d3a91e133c75a4db4764f80b20414f6e6a2f9356f154601f80ac25f5d1085ed379903bdbfcf389223a65ff274f54722d3acee6853c70e069f9d635d4b099468646c04bc36ad64c9c8c0abd5f519f421c92ecd93ba5b50b62cc9e83d122695838b886ab8c3c0ca5523cfb86cd455aaa58af538d129afe6120b061a21b8685106d872354706dc9b17c7e50e5361d801d3b329d0e73f98b6927c132f37bba713a0453c8e13afeeb1b694352c43cd7432651dd5259210b3c9a9ebdd44ba9f920231d237c46956d2af1a168c7e2e03b0272ffee1ee8cd62985d3cbf3484ddeea95965788c2b73fe40f7494a88f67dfc29b4f1bbcab16e2213774a70afbf1fef1264a521b895d0d009b482adcb681827c9978bfa407766245cc3bf1842564f237970410f57c18d25db7ed77020a30aecdf33f29e1d07e73e0c3ec9845da40845ba40c3d6df04c12ac993ba55f841c16d55396cbe4f14bd45669ae5caa6822c72902e5ca2dd8f9c61b2463f1846dce03987ff9bc8843d9309377cb548c44daac362179b6128bc77d712416bcaa0dc09cd0c64bda40672f8bbbbcdb16fec28d3bb9253979a94c64fbe2a33e2147f05eb986c969af2eeaee30d69981fc7f111387d944a7e84bfa4b851bb7511bd59546a6dafeb64d4a923ddbbcd1eb0922a16b29cf52d5f9cc5afa0fbe6f7203fce64203002fb53176d928077fc398ec4a89b9b413f33a608d8b49d87f455ba43ce91d043c2b468e40a4db6922c48777469dd94cfbb386de0c87b617aa8b539c900156daefb792e5c754fca9934632162eb58d9ace4fb35a0f29e7fdc1936785b348bd7ccea1309f7aadeef01c49d8b5a7321ebe0a99f0d16dc635133ea41e249c3b1a36ec1ff988c363481f1c2d1c6ec3d3cade8985b792b04603a87935ab61a47ec9dfe3590516947aef8e8b87c3b41ff748da21492ab7df0c9ddcf08585abb2c4b7a73fdaee58373d06b05c98d008098512855f1a54f209e7aebf0b3bbd51b4dbe569227edfad111d23fb7b3db26726074dbf07e1c7388281991a76d4a9c0178613332b9315ffcaa39a82b650eb85333491e926a064e1cf8a7906c93657de188e572de689010f962f9c0d92293138f8f778bf067dfd8e52b9fbbe183ceb13f5649189742ba278cc895ddf9d7e4756d4edd03170761f1bb87e84d0b917eaeaa5968550260d5b7005161c0935364a7271b547bea318f34c18d7baff9b5474a56c28c48b47835994e8d4388adf6aa59249f12d41dde030ef04dc3595d6f9a42e78f47288c1c8af99632eb9e46c55ddf14bf5032583ef867316d09d9c27b73d13383c1e2e2db8150fb91ae0f436aed23003e58bd0aa15a51c31310321d4c08a5475c788aaf548c6ed35e3184236c68049968f882b8a9c24f228d89aa51f81ea5c64f6942e7553bc179fa21d44c751eb989294c1cc58550cbf4c3faf7d35f472338591fe18b2904f93ccbdcb5fa04b32d6ef2c0620729e614cf9e1a4b7b4e33516ce3fae43adbccb38109085b88ff3460dc5509e50ec5a157ec3b6991c4f0f82443d26e0d05125b785f4e085f494420435745f4aa943607dd8fb4efe8b5e90da775b8eb983d9e9a743e0f430edb422cbbb434575b04ede61562c9efbd30632f7459390dc1d0960d5f833f175c8ec191fc2d3f69f40d88522bec35b2c8b87d3db8139f961c1c6b48f0120f5d0a9e6006cd45556fa28c81e9972c5ee3e1f9844c36e7b1e2c67f0a3ae687f79501f4ef12f5e2830a61220acdb7723398b9187d23834b8506f6b749fb2b97d1867162ce3460a43bdc0b577a00b8b142d8f0dda5cfd9e5d5a4bf19746bd43fc42e00c16060c7bb898174d230792597b7b6cd69b5d9ce7b2d485389f523b726a1ddd1fe5675a6b1e1beea62574e54dc9a9ab0c8d39c35d83d893b9e3f249e0225e495f6d2a94b588cf001780b60787107df74f3afc102cc3cb8d312244601408974c80a48fc9d37ec44dbff1d777f9fdeca2492aaf36b12fd4cef9dbe1573def8a7e89414d89dc2373d24c93188c8e76b8d22ee0d6f3b5596946b55e33f527c4df5451b1c2464d3681b804eac9f0a7d8dbe57c0e5ab5d90d19d241ac11a37256fe690d8a3de70d6fa86ffa482182a334a51f2718f31f9842aac977dad0463ea5ed2df7e755d37429cb85e35b0b02d99a0aa48edd5a068e3651ebee7d8cafb4a5f511b5acbc9cf183e92af6173c52fe84ff64c4cc905a724331431c85e9e4c83c93cd939d2ba733673af01fd4c444545af4b2fca1dfc3bf51a24a6409e18c84ffd6fe726e68d265f25594fc1ef0a1961fd1cb7f43df5e1a4776e7c2b7d049d434ebdd978a6dc2ff58d9fc0fcf939169f5ad5f0173e99698031d17eb7cbd0f888a83a5324c60acfc11be25ab43f1601ae47896bd98c391c6f3145423625aae816efcbd6670f50c6814a4128a15dc1cf076b36ab2f29c4991dbe00591fe821de1ac09c9a99eca15f91e72da11101d77d01142d17f3081837aae3bb5696b1e29c6a4ba7dfb3028b5f38ed1eba1fd0d8f1989c268b5cbb2e71d7d9b9d5c97da0c23cf7aa48a9f4a2e5bd5307aa40d06ff75a2d414b9fa602b081fa0412b99b594d267d50eb3c5fbee82b2e95363c961611801c8254575d5506f93d69664bf977db17cb20aefdff7ea077d1267b204056ca0a27ee4d8cf5c072fb03e472c32dc449dd90fddd185405b06a26eb41ada4a39c55fa1b268e5274585d3ee029b520b15fb87c2cd4468ce44a4b3f1c34d60620ad9322580227c1fce30c4a57819ad9dd182693dc803e82d891a96032bd4e979d1beff564be8628111c023a1e534de85e01597b3440f32cc6fc86629a00769767c0bde5e52e448d58b45cded7cb602774b575a8fdc12ccca5da6fe70784871f7aca08f76e95ec223ee1f5cd59749d5f22553e8ee241a8802002d9f35a078169881e50fb4f6b2e545132b75b77226c5a08956741bd1aef7e17d8aa07faa995d2c68d977770c17a6d594312d7c613e440f9006f53fb00c9b59597a2b19b9f17fb26117bc1140d849e67620695900d53ea3ca02a5c43481856c5d8b18eb246e6895cac99d4dc4aa71efc2ae47e57b4a04cf1276591d455f849c5abcb0c3fde75fa66f60f04abf7f142c8da656fe55cd2eece70aa03097ee9b4e75b0866991970a5f23e16434bd1be33647d0917dd5d3b5335e169adcedd65635806a9a2fa1b4d87fefd5c2e6c4b7f8c95472d57e051cc468fef69f7390af54f5c1acf3f398b0a762823fdff13d64e65e8150bb42a3ea9310790bad3ced5a43de9bf2b36f5fbd15e2e29c17439116b6d193ec1da4c7aefa248a3dfec96e858d0b4e31ae5fd892443d809a99459b12207b5c2bc665d905a786e31d83f5724c405cc92313091e5e3bd32929d95df57bcf8266d705b86651db7be630826"}) r13 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r13, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r13, 0xd000943d, &(0x7f0000000a40)={0x0, [{r15}, {r15, r16}, {r15, r16}, {r15, r16}, {0x0, r16}, {r15, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r14, r16}, {r15}, {r14, r16}, {r14, r16}, {r14, r16}, {r14, r16}, {r15}, {r15, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r14, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {0x0, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r15}, {r15, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r14, r16}, {r14, r16}, {r15}, {r15, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r14}, {r15, r16}, {r15}, {r15, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r14}, {r15, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {}, {r14, r16}, {r14, r16}, {r14, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {0x0, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {0x0, r16}, {r15, r16}, {0x0, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r14}, {r14, r16}, {r15, r16}, {r14, r16}, {0x0, r16}, {r15, r16}, {r15}, {r14, r16}, {r15, r16}, {r15, r16}, {r14}, {r14, r16}, {r15, r16}, {r15}, {r14, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r15}, {r14, r16}, {r15, r16}, {0x0, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {0x0, r16}, {r15, r16}, {r14, r16}, {r15}, {0x0, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r15}, {r15, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r14}, {0x0, r16}, {r14, r16}, {r15, r16}, {r15}, {0x0, r16}, {r14, r16}, {r14, r16}, {r14, r16}, {r14}, {r15, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {0x0, r16}, {0x0, r16}, {r15, r16}, {r15, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {}, {0x0, r16}, {r14, r16}, {r15}, {0x0, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r14, r16}, {0x0, r16}, {r14}, {r15, r16}, {r14, r16}, {r15, r16}, {r15, r1}, {r14, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r14}, {r14, r16}, {r15, r16}, {r15, r16}, {r15}, {r14, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {r14, r16}, {r14, r16}, {r15, r16}, {0x0, r16}, {r14, r16}, {r15}, {r15}, {r14, r16}, {r14, r16}, {r15}, {r14, r16}, {r14, r16}, {r15, r16}, {r15, r16}, {r15, r16}, {r15}, {r15, r16}, {r14, r16}, {r15, r16}, {0x0, r16}, {r15}, {r14, r16}, {r15, r16}, {0x0, r16}, {r15, r16}, {r14, r16}, {r15}, {r14, r16}, {r15}, {r14, r16}, {r15, r16}, {r14}, {r15, r16}, {r14}, {r15, r16}, {r14, r16}, {r14, r16}, {r15, r16}], 0x9, "c5b776e43d40c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r13, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r16}, {0x0, r16}, {r15}, {r15}, {r15, r16}, {}, {}, {}, {}, {r15, r16}, {0x0, r16}, {}, {r14, r16}, {0x0, r16}, {}, {r19, r16}, {0x0, r16}, {}, {}, {0x0, r21}, {0x0, r16}, {r15}, {0x0, r16}, {0x0, r16}, {r15}, {0x0, r16}, {r14}, {}, {r14}, {0x0, r16}, {}, {}, {r14, r16}, {r15}, {}, {0x0, r16}, {r15, r16}, {0x0, r16}, {r14}, {}, {0x0, r16}, {r15}, {}, {0x0, r16}, {r15}, {0x0, r16}, {r15}, {0x0, r16}, {}, {r14, r16}, {0x0, r16}, {r14}, {}, {r15}, {r14}, {}, {r15, r16}, {}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {r15, r16}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {}, {r14, r16}, {}, {r14}, {}, {}, {0x0, r16}, {}, {r15}, {r14}, {r17}, {}, {}, {0x0, r16}, {r15}, {}, {}, {0x0, r16}, {r14}, {0x0, r16}, {0x0, r16}, {}, {r14, r16}, {}, {}, {0x0, r16}, {}, {r14}, {0x0, r16}, {}, {r15}, {0x0, r16}, {0x0, r16}, {r14}, {r15, r16}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {}, {0x0, r16}, {r14}, {r14, r16}, {}, {0x0, r16}, {r14, r16}, {0x0, r16}, {r15, r16}, {r14, r16}, {}, {}, {0x0, r16}, {r14}, {0x0, r16}, {}, {r14}, {r14, r16}, {}, {}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {r15, r16}, {}, {0x0, r16}, {r14, r16}, {0x0, r16}, {r15, r16}, {r14, r16}, {r15, r16}, {0x0, r16}, {}, {r15}, {r15}, {}, {0x0, r16}, {r14}, {0x0, r16}, {r15, r16}, {r14}, {0x0, r16}, {r15, r16}, {0x0, r16}, {0x0, r16}, {}, {0x0, r16}, {r15}, {0x0, r16}, {r15}, {r14}, {}, {}, {}, {0x0, r16}, {r14, r16}, {r15}, {}, {0x0, r16}, {}, {r15}, {0x0, r16}, {}, {}, {r14}, {r14}, {0x0, r16}, {r14, r16}, {r15, r16}, {0x0, r16}, {r14}, {}, {r14}, {0x0, r16}, {r15}, {r14, r16}, {r14, r16}, {0x0, r20}, {0x0, r16}, {r14}, {}, {}, {r15}, {r14}, {}, {r14}, {r15, r18}, {0x0, r22}, {r15, r16}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {}, {r15, r16}, {r14, r16}, {r15}, {r15, r16}, {}, {}, {}, {}, {}, {r15}, {}, {r14, r16}, {}, {}, {0x0, r16}, {r15}, {0x0, r16}, {r14}, {r15}, {r15}, {}, {}, {r15}, {}, {0x0, r16}, {r14, r16}, {r14}, {}, {0x0, r16}, {0x0, r16}, {}, {r15, r16}, {r23}, {}, {r14}, {r15}, {r14, r16}, {r15, r16}, {r15}, {0x0, r16}, {}, {}, {}, {r14, r16}, {0x0, r16}, {r14, r16}, {0x0, r16}, {r15}, {r15}, {r14}, {0x0, r16}, {r15, r16}, {r15}, {0x0, r16}, {}, {}, {0x0, r16}, {r14, r16}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b6c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "58d2c0f4f17a2c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c6c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r14, r24}], 0x3, "8b3213c000cd6c"}) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:32 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 477.932471][ T6995] loop2: detected capacity change from 0 to 87 [ 477.943066][ T7002] loop1: detected capacity change from 0 to 87 [ 477.947621][ T7001] loop4: detected capacity change from 0 to 87 03:18:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6401, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f, 0x300, 0x70bd2b, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x25}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40000e0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:32 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) write$P9_RLERROR(r1, &(0x7f0000000100)={0xf, 0x7, 0x2, {0x6, 'msdos\x00'}}, 0xf) r2 = openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x40000, 0x108) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r2, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 03:18:32 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 477.990724][ T6995] FAT-fs (loop2): bogus number of FAT sectors [ 477.996819][ T6995] FAT-fs (loop2): Can't find a valid FAT filesystem [ 478.004411][ T7001] FAT-fs (loop4): bogus number of reserved sectors [ 478.010958][ T7001] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:32 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000100)) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:32 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6401, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 478.087304][ T7039] loop1: detected capacity change from 0 to 87 03:18:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 478.244694][ T7058] loop1: detected capacity change from 0 to 87 [ 478.312830][ T7066] loop2: detected capacity change from 0 to 87 03:18:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:33 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x169842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r2, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x10000, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x400040, 0x1, 0x3}, 0x18) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r5, 0x0, r7}, 0x3f) truncate(&(0x7f0000000080)='./bus\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x1}, 0xffffff1b) sendfile(r2, r3, 0x0, 0x80000007) 03:18:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:33 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 479.005154][ T7089] loop1: detected capacity change from 0 to 87 [ 479.021591][ T7094] loop0: detected capacity change from 0 to 87 [ 479.035652][ T7099] loop4: detected capacity change from 0 to 87 [ 479.037277][ T7097] loop2: detected capacity change from 0 to 87 03:18:33 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) [ 479.079435][ T7099] FAT-fs (loop4): bogus number of reserved sectors [ 479.086166][ T7099] FAT-fs (loop4): Can't find a valid FAT filesystem [ 479.086342][ T7094] FAT-fs (loop0): bogus number of reserved sectors [ 479.099315][ T7094] FAT-fs (loop0): Can't find a valid FAT filesystem [ 479.224279][ T7138] loop1: detected capacity change from 0 to 87 [ 479.395418][ T7094] loop0: detected capacity change from 0 to 87 [ 479.403586][ T7094] FAT-fs (loop0): Unrecognized mount option "./bus" or missing value 03:18:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x20010, r1, 0xfffffffffffffffe) 03:18:36 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 03:18:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) creat(&(0x7f0000000180)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x50) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x2, 0x7, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7, 0x10, 0x1, 0x401}}) clock_gettime(0x0, &(0x7f0000006800)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000066c0)=[{{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/25, 0x19}], 0x3, &(0x7f0000001600)=""/126, 0x7e}, 0x79c}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/7, 0x7}, {&(0x7f00000026c0)=""/24, 0x18}], 0x3, &(0x7f0000002740)=""/147, 0x93}, 0xcb9c}, {{&(0x7f0000002800)=@phonet, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002880)=""/241, 0xf1}, {&(0x7f0000002980)=""/42, 0x2a}, {&(0x7f00000029c0)=""/58, 0x3a}], 0x3, &(0x7f0000002a40)=""/179, 0xb3}, 0x6}, {{&(0x7f0000002b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002b80)=""/50, 0x32}, {&(0x7f0000002bc0)}, {&(0x7f0000002c00)=""/209, 0xd1}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/66, 0x42}, {&(0x7f0000003d80)=""/148, 0x94}, {&(0x7f0000003e40)=""/159, 0x9f}, {&(0x7f0000003f00)=""/56, 0x38}, {&(0x7f0000003f40)=""/151, 0x97}], 0x9, &(0x7f00000040c0)=""/189, 0xbd}, 0x81}, {{&(0x7f0000004180)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000006580)=[{&(0x7f0000004200)}, {&(0x7f0000004240)=""/136, 0x88}, {&(0x7f0000004300)=""/83, 0x53}, {&(0x7f0000004380)=""/110, 0x6e}, {&(0x7f0000004400)=""/65, 0x41}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/218, 0xda}], 0x8, &(0x7f0000006600)=""/157, 0x9d}, 0x7}], 0x5, 0x1, &(0x7f0000006840)={r6, r7+60000000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000006940)={'syztnl1\x00', &(0x7f0000006880)={'syztnl0\x00', 0x0, 0x10, 0x40, 0x3f, 0x86, {{0x24, 0x4, 0x0, 0x1f, 0x90, 0x65, 0x0, 0x4, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x2b, 0x8b, [@remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, @private=0xa010102, @broadcast, @multicast1, @multicast2, @local]}, @timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x9, [{@empty, 0xffff29d7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @rr={0x7, 0xf, 0x32, [@remote, @rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x3f, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffffc}, {@rand_addr=0x64010101, 0x7e47}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xaae}, {@remote, 0x1f}, {@empty, 0x400}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000006a00)={'ip6tnl0\x00', &(0x7f0000006980)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x3f, 0x81, 0x1d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x10, 0x40, 0x2, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000006b00)={'syztnl1\x00', &(0x7f0000006a80)={'gretap0\x00', 0x0, 0x1, 0x80, 0x9, 0x3, {{0x15, 0x4, 0x0, 0x5, 0x54, 0x65, 0x0, 0x58, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x5b, 0x1, 0x0, [{@multicast1}]}, @timestamp={0x44, 0x18, 0x31, 0x0, 0x0, [0x3f, 0x3, 0x6e4, 0xfffffc01, 0x20]}, @cipso={0x86, 0xe, 0x3, [{0x0, 0x8, "114fc4c1714a"}]}, @lsrr={0x83, 0xb, 0xf5, [@local, @rand_addr=0x64010100]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000006d00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006cc0)={&(0x7f0000006b40)={0x180, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 03:18:36 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 481.832551][ T7173] loop0: detected capacity change from 0 to 87 [ 481.834973][ T7172] loop4: detected capacity change from 0 to 87 [ 481.839600][ T7177] loop1: detected capacity change from 0 to 87 [ 481.850510][ T7174] loop2: detected capacity change from 0 to 87 03:18:36 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 481.877150][ T7173] attempt to access beyond end of device [ 481.877150][ T7173] loop0: rw=2049, want=230, limit=87 03:18:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 03:18:36 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) lseek(r1, 0x0, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x40a00, 0x50) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) [ 481.940260][ T7172] FAT-fs (loop4): invalid media value (0x00) [ 481.946407][ T7172] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:36 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 482.031399][ T7216] loop1: detected capacity change from 0 to 87 03:18:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 482.109519][ T7227] loop0: detected capacity change from 0 to 87 [ 482.174761][ T7227] attempt to access beyond end of device [ 482.174761][ T7227] loop0: rw=2049, want=230, limit=87 [ 482.198512][ T7237] loop1: detected capacity change from 0 to 87 03:18:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:37 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x11fc, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat(r1, &(0x7f0000000100)='./file1\x00', 0x40040, 0x80) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)={'U-', 0x3a}, 0x16, 0x2) 03:18:37 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:37 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 482.929370][ T7267] loop4: detected capacity change from 0 to 87 [ 482.936840][ T7269] loop2: detected capacity change from 0 to 87 [ 482.939871][ T7268] loop0: detected capacity change from 0 to 87 [ 482.954546][ T7273] loop1: detected capacity change from 0 to 87 03:18:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 482.980347][ T7267] FAT-fs (loop4): invalid media value (0x00) [ 482.986516][ T7267] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:37 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x40400, 0xe1) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 483.031057][ T7268] attempt to access beyond end of device [ 483.031057][ T7268] loop0: rw=2049, want=230, limit=87 03:18:37 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x6000000000000, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 483.088653][ T7304] loop1: detected capacity change from 0 to 87 03:18:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="324e073d2c5f5363fd7693552dbfb2fdcfc43a6d400544989ede", 0x1a}, {&(0x7f0000000180)="0f505cb5d74b6bcd34a1929aa2d6d534fee949905f1008020624ee637af69dd7ffd5200cf962f7d9632cbcb889a3d4faa39853d93945d8d47b4296ac81a1b9ce70a80068b0afcad7ca5d6f9b648eae0068896d4b2b6a361e55c501095b727be35dd944c472ac56942cbb050260a57fe5239e0a4b6c18e2d92da2b196944617ecfb68469c8653861dfba74c3d0c6693aa46e147029643fc2e169d4d91532925c1187abae6125c95c09fb586a0ed83c69b69ad", 0xb2}, {&(0x7f0000000240)="a153a958b89c6789738ca299023bd9da3d23acb76940eabf9c84142b1412559d8f39c14372892adbe9ed77c511ae75b6b8561366726c0634e817752e9c0b29974d955679a75a8433f75b63a001d3aedc3d23a165142879dff77d74bc304773cb625d5c5fc0", 0x65}, {&(0x7f0000000300)="0fc3e30cc966e5df39680500bea90a7865653142f47dc9f9efe69060e90271d31d16f1ae433bfeefcc3a3554ffec28945595c711d30b0400125c0136d2078c36370d21d089c8ac5ceeb6a0844163c20168dffed821cfa04411cf9b32250b95ef4032dbf3a48ebdc553df8fc549650a714f8390d30b68b4f2b9f27e4848bbeb5ce13440903954816320ef029b9e31c84e78e51223788bfa2172fa1c3a87d36a93f7ae95edec0315d3f3f01b37261c473187d67cbe5283ab6b9f6ae58a3cda05c1cb1ebc232ad6abb03bcbaab9cbafd1cf82db68aecfc02ba37f1ed89f406cb3ad134c9392c63e46e7866e9ec84e7ba83f7bc89d197e349bb4efde18c1a5b7", 0xfe}, {&(0x7f0000000400)="410327", 0x3}, {&(0x7f0000000440)="3a9bfd3d1c73904f4427fc9bc8c1feb620cd392194cc3bb07202eedce45c27ccd1371b45e4c4e77904284bd5a4ac12ff395d0c407aed9ecb2a0c08a5186e89e34f6be091a2c96caa630c6b0c0b1a1927bc64f1bcc472a4deb99e40dfd4f82dc8023ceb32c7eedd9438c43bd574467dc7039e275ad15bf5e6ab2b1df439d4741963bc91bcdbb7e31f790ae29dca", 0x8d}, {&(0x7f0000000500)="ec993e44c79ca88d3bca5c43eb673dfda7770627d73f8a341012dcd234f837702db6cc1ebee9bdb18d4874d2e505ef0afef1bc658dd679e76b5476659e6b2c6defad69e247075c03faf543f4e368b5d288393fbd8d25e15a3674afb640941fa4e83b2fc65764b5051ccb1e61a055570ed9d89c9681018f7755d0186c17399640", 0x80}, {&(0x7f0000000580)="40b0a59e6c39329ec1ac7737b56f77e09f9300d36f9989771d78f085be19668d94ec3f481a705f8becd6775bee3d5dff7154a2667ec2a880c4d560e15545acc84051b5eb6ab926ef77d671fff9602569f27b6e7c1c441fd082d351c127", 0x5d}], 0x8) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 483.217001][ T7325] loop0: detected capacity change from 0 to 87 [ 483.249276][ T7325] attempt to access beyond end of device [ 483.249276][ T7325] loop0: rw=2049, want=230, limit=87 03:18:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:37 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:37 executing program 5: r0 = gettid() r1 = gettid() getpgid(r1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/cgroup\x00') syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) wait4(r0, &(0x7f0000000180), 0x1, 0x0) r2 = gettid() wait4(r2, &(0x7f00000001c0), 0x1000000, &(0x7f0000000200)) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r3, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) [ 483.264205][ T7334] loop1: detected capacity change from 0 to 87 [ 483.350512][ T7348] loop2: detected capacity change from 0 to 87 03:18:38 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000180)=""/90, 0x5a}], 0x2, 0x5, 0x20) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 03:18:38 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:38 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000180)='./bus\x00') chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x400) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000000)=@alg, 0xffffffffffffffcc, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/216, 0xda}, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) open_tree(r0, &(0x7f0000000100)='./bus\x00', 0x101803) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0x4) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x10000, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) fspick(r4, &(0x7f00000001c0)='./bus\x00', 0x1) 03:18:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:38 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 483.787376][ T7372] loop1: detected capacity change from 0 to 87 [ 483.812238][ T7374] loop2: detected capacity change from 0 to 87 [ 483.828678][ T7381] loop0: detected capacity change from 0 to 87 [ 483.879201][ T7381] attempt to access beyond end of device [ 483.879201][ T7381] loop0: rw=2049, want=230, limit=87 03:18:38 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000100)='./file1/file0\x00', 0x16) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 483.919902][ T7396] loop1: detected capacity change from 0 to 87 03:18:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) 03:18:38 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 483.963487][ T7404] loop4: detected capacity change from 0 to 87 [ 483.997852][ T7404] FAT-fs (loop4): invalid media value (0x00) [ 484.003875][ T7404] FAT-fs (loop4): Can't find a valid FAT filesystem [ 484.030098][ T7417] loop0: detected capacity change from 0 to 87 [ 484.040267][ T7421] loop1: detected capacity change from 0 to 87 [ 484.074823][ T7417] attempt to access beyond end of device [ 484.074823][ T7417] loop0: rw=2049, want=230, limit=87 03:18:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) 03:18:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000007) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)=@ll={0x11, 0xf6, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="a04c9b90ee23cadff1acb01c602e980921f89953f8a591b31455f807fa12ff76f1183d30c40d1ffb56c4c6f50f484ee2a7bdb29c3eb9b9915fa62955111c67af34659a2a6a932f70a8a9bc2b206b5ae33a7d8dc3835bbc0d8c27a70cffe61804830b81e258d226e11457972e4b54bae92087c20caabf7cc8f889517d19b8612d45874816478085d5cf061bfefcc3619b3e5ea087c2f3c991b52b5b25cd1037557f5643d6f53dbae6fb99d69e097a3155", 0xb0}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000240)="a46d138c14af62c3eb96ac", 0xb}], 0x3, &(0x7f00000013c0)=[{0xd8, 0x29, 0x9, "c1aab46d6b01c74af4082a6c81fad1f2cd0452c385c99099af3932d8edcbb1170e9a9ec949266811734c26e53b3fc4bd51594189fb6dbccf3100a1bcff4bef04b5623b976b52b8123b98f6d1cd6413739faafb7df2847204da9b92b60b9ba19a3915620f7b02fb4d55d4ee2fdf2045ff0d48d634df8ffa35a6d41135781b719bebe8c7437dc8cb7a66340b25f0b950754d5d1edcc433653512fd662938545810345467f941d7f6499e494aaaae8e735c6614d6e553e582cd5b894e29863554844b"}, {0x28, 0x108, 0x7, "9b2435ce490937571eae1b8aabe27ba2f7"}, {0x78, 0x10b, 0x9, "fdefeba71471e8ae8fb7398a6818226f0836fc87aedc86c24c4e67a69f90e7e6b6fd93bdc07f015df2c03dd2943111937aa4930dff51789de1dda5f83c6075bd6f22b0bb46e1d31744c8fe43dcb821286fe30a0a30586532c11c9a18dc2047ea8a73cb"}, {0x20, 0x113, 0x1167, "3b9dc5abb0722fe3f54e4bbeb1"}, {0x50, 0x109, 0x8, "1c2579352d55e09575b1114eb8d4c08058653ed5fc9676f0fdeb59ab9fa7176b2a800c2b29bc711ffbdaa136c408c8927dc818d443410d964d23b5ad"}, {0x78, 0x10d, 0x6, "58168b24b58ff0224283863ba118f59880ed1f562556eb6ec29cc2d10d79aae65beb7d5402b0f5086d4d6db74254bf93f24c1ce8e3bbd1295d4273c99942cf032ef627057c41738b96f6f053ff67d9477168cc2532caa8f4d7b263f2635a83384bcc18531d1fed"}], 0x260}, 0x0, 0x840, 0x1, {0x0, r6}}, 0x0) write$sndseq(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) sendfile(r4, r5, &(0x7f0000000100)=0x101, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r2, 0xc660a000) 03:18:39 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(0x0, 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:39 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000180)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x80, {0x80, 0x2, 0x3}, 0x8, r4, r5, 0x1, 0x40, 0x27, 0x5, 0x5f3, 0x1, 0x40, 0x101, 0x2, 0x9, 0x9e81, 0x8, 0x9, 0xa2d9, 0x2}}, 0xa0) 03:18:39 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 484.803739][ T7454] loop1: detected capacity change from 0 to 87 [ 484.824027][ T7457] loop2: detected capacity change from 0 to 87 [ 484.835449][ T7466] loop0: detected capacity change from 0 to 87 03:18:39 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) 03:18:39 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) renameat2(r0, &(0x7f0000000100)='./bus\x00', r2, &(0x7f0000000180)='./file1\x00', 0x0) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r3, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) 03:18:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(0x0, 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:39 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 484.875627][ T7457] attempt to access beyond end of device [ 484.875627][ T7457] loop2: rw=2049, want=230, limit=87 [ 484.894118][ T7466] attempt to access beyond end of device [ 484.894118][ T7466] loop0: rw=2049, want=230, limit=87 [ 484.953512][ T7487] loop1: detected capacity change from 0 to 87 [ 484.987612][ T7498] loop2: detected capacity change from 0 to 87 [ 485.000453][ T7503] loop4: detected capacity change from 0 to 87 [ 485.016626][ T7503] FAT-fs (loop4): invalid media value (0x00) [ 485.022681][ T7503] FAT-fs (loop4): Can't find a valid FAT filesystem [ 485.033566][ T7498] attempt to access beyond end of device [ 485.033566][ T7498] loop2: rw=2049, want=230, limit=87 03:18:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = gettid() tkill(r0, 0x34) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x3, 0x80, 0x8, 0x0, 0x20, 0x1008, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7fff0000, 0x5}, 0x48c08, 0x3, 0x3, 0x7, 0x6, 0x3b7cd0ce, 0x1ff, 0x0, 0xff, 0x0, 0xfffffffffffffffb}, r0, 0x8, r1, 0x8) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) ptrace$cont(0x20, r0, 0x1, 0x2e) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000200)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ftruncate(r6, 0x5) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r5, r6, 0x0, 0x80000007) 03:18:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="ecf2", 0x1001, 0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(0x0, 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 485.865831][ T7531] loop1: detected capacity change from 0 to 87 [ 485.878477][ T7535] loop2: detected capacity change from 0 to 87 [ 485.896450][ T7537] loop0: detected capacity change from 0 to 87 03:18:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000100)='./bus\x00', 0x600, 0x1) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 485.942050][ T7535] attempt to access beyond end of device [ 485.942050][ T7535] loop2: rw=2049, want=230, limit=87 03:18:40 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x48) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) faccessat2(r0, &(0x7f0000000100)='./file1\x00', 0x2, 0x200) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) chdir(&(0x7f0000000180)='./file1\x00') 03:18:40 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 486.014779][ T7557] loop1: detected capacity change from 0 to 87 [ 486.056030][ T7566] loop4: detected capacity change from 0 to 87 [ 486.068586][ T7573] loop0: detected capacity change from 0 to 87 [ 486.075539][ T7566] FAT-fs (loop4): invalid media value (0x00) [ 486.081697][ T7566] FAT-fs (loop4): Can't find a valid FAT filesystem [ 486.108349][ T7587] loop2: detected capacity change from 0 to 87 03:18:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:41 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x11000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000100)='./file1\x00', 0x400) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:41 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 486.908497][ T7618] loop2: detected capacity change from 0 to 87 [ 486.913985][ T7617] loop0: detected capacity change from 0 to 87 [ 486.926297][ T7616] loop1: detected capacity change from 0 to 87 [ 486.944945][ T7618] handle_bad_sector: 1 callbacks suppressed [ 486.944963][ T7618] attempt to access beyond end of device 03:18:41 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000) write(r1, &(0x7f0000000240)="9401ea5282b8dcd2365a6bc9f26a4ada188ebf8956a9d646e6868c54a509ae7cf9cd4c39e987848a79005968eeaedf3121858f6b", 0x34) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file1', [{0x20, '].$'}, {0x20, '/'}, {0x20, 'msdos\x00'}, {0x20, 'msdos\x00'}, {0x20, 'msdos\x00'}, {0x20, 'msdos\x00'}, {0x20, 'msdos\x00'}, {0x20, 'msdos\x00'}], 0xa, "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"}, 0x103b) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 486.944963][ T7618] loop2: rw=2049, want=230, limit=87 03:18:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:41 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1944ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 487.006863][ T7617] attempt to access beyond end of device [ 487.006863][ T7617] loop0: rw=2049, want=230, limit=87 [ 487.091804][ T7654] loop2: detected capacity change from 0 to 87 [ 487.115287][ T7654] attempt to access beyond end of device [ 487.115287][ T7654] loop2: rw=2049, want=230, limit=87 [ 487.129366][ T7655] loop1: detected capacity change from 0 to 87 [ 487.169445][ T7666] loop4: detected capacity change from 0 to 87 [ 487.177335][ T7666] FAT-fs (loop4): invalid media value (0x00) [ 487.183339][ T7666] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:42 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:42 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) sendfile(r1, r0, &(0x7f0000000300)=0x6, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r2, &(0x7f0000000280)=ANY=[], 0x12) recvmmsg$unix(r2, &(0x7f0000002580)=[{{&(0x7f0000000340), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000400)=""/69, 0x45}, {&(0x7f0000000480)=""/52, 0x34}], 0x3}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/58, 0x3a}, {&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000000600)=""/46, 0x2e}, {&(0x7f0000000640)=""/67, 0x43}], 0x4, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000800), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f0000000980)=""/30, 0x1e}], 0x2, &(0x7f0000000a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000b00)=""/15, 0xf}, {&(0x7f0000000b40)=""/56, 0x38}, {&(0x7f0000002840)=""/129, 0x81}, {&(0x7f0000000c40)=""/81, 0x51}, {&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f0000000d00)=""/119, 0x77}, {&(0x7f0000000d80)=""/26, 0x1a}, {&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/74, 0x4a}, {&(0x7f0000000f40)=""/139, 0x8b}], 0xa}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/141, 0x8d}], 0x2, &(0x7f0000002240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002280), 0x6e, &(0x7f0000002400)=[{&(0x7f0000002300)=""/82, 0x52}, {&(0x7f0000002380)=""/113, 0x71}], 0x2, &(0x7f0000002440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}], 0x6, 0x2, 0x0) statx(r3, &(0x7f0000002700)='./file0\x00', 0x400, 0x200, &(0x7f0000002740)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x4d00, 0x0) statx(r4, &(0x7f0000000180)='./file2\x00', 0x400, 0x4, &(0x7f00000001c0)) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) 03:18:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) recvmsg$unix(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x2000) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x7}, [{0x2, 0x4}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x0, r5}, {0x2, 0x3, r6}], {0x4, 0x4}, [{0x8, 0x3, 0xee00}, {0x8, 0x3, 0xee01}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x7, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x1, r8}, {0x8, 0x0, r9}], {0x10, 0x1}, {0x20, 0x2}}, 0x7c, 0x0) sendfile(r2, r3, 0x0, 0x80000007) 03:18:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:42 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 488.032972][ T7684] loop2: detected capacity change from 0 to 87 [ 488.039698][ T7685] loop1: detected capacity change from 0 to 87 [ 488.056538][ T7684] attempt to access beyond end of device [ 488.056538][ T7684] loop2: rw=2049, want=230, limit=87 [ 488.068295][ T7692] loop0: detected capacity change from 0 to 87 03:18:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:42 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:42 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 488.149161][ T7692] attempt to access beyond end of device [ 488.149161][ T7692] loop0: rw=2049, want=230, limit=87 [ 488.151643][ T7709] loop1: detected capacity change from 0 to 87 [ 488.218428][ T7722] loop2: detected capacity change from 0 to 87 [ 488.252991][ T7722] attempt to access beyond end of device [ 488.252991][ T7722] loop2: rw=2049, want=230, limit=87 [ 488.260221][ T7730] loop4: detected capacity change from 0 to 87 [ 488.271981][ T7730] FAT-fs (loop4): bogus number of FAT sectors [ 488.278126][ T7730] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000100)='./bus\x00', 0x10a00, 0x20) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:43 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) sendmmsg(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002d00)="898388b65fa66eb1fd8c07d6c471bad6d54047ffd72a7058d19edf22739dd7830ec02e99fd24eab25423179961bd5c7949e95e7a054924c39fce1443b7d5fff0dc50cd8a38560a2afb2e4d10159c105522ba9d547d002e1b68b4ca23dc348b1b8d98e2ddebadc57347661438084658f4324f7ad7ecf47638cada94af31e6adde42fabd85ccd8c062c7fa451f77ca1d7858a817ae109a47f0b39b6c8682ba80a5950c5315dba02439b38826b25374c34db11c62742e9276ce4d", 0xb9}], 0x1, &(0x7f0000000300)=[{0x60, 0x97, 0x8, "6429f8af5b01aa6a63268327f6ddac209b59e1157e9e0d7278785638ffb2c6c3446d0db5acfd71835321097186ecaa8a142314c3738fa8de610ae8fcac9cec00050e83d5b3a38d99fc35ee3ed08573"}, {0x1010, 0x115, 0xfffffffd, "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"}, {0x70, 0xd, 0xff, "5d63f9b8d54f0e725920f6bbc6a2876e53ca89bfd67bd2925b0df98fcc2f5d65476461ec55fdc169c54585e6e8b837f157a0ad1c80cac679147d6e3b0c921a00d3325fedf86b533b63def4dcf1c8aaba5cdb2081eed1d64838d583646a5727"}, {0x30, 0x113, 0x290c, "f1fac91ae25310636d1248b6eaf90cbdf796897692faca533d"}], 0x1110}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="900ae69757f0e605cff200f03beb8807f0307d009756", 0x16}, {&(0x7f0000000240)}], 0x2}}, {{&(0x7f0000001440)=@can, 0x80, &(0x7f0000001980)=[{&(0x7f00000014c0)="4df2fec079386248a7975b73944b905e48e936f2abcca591ec6808b312a214bd837c448f9cfadbdea281e37f42afd6e45a2f49f3e87ac422822b3bf40a6140956caa0ba6b54ae971c144d294bb585cca66ef14710789fadb6ea9e9a148f860581a9d29bfabf804fdf0d0525e7e51cfb74107ab6ac34ad1d9b6f329ff4886b0a53002426b512a79badb590798b3971548f8cbe75814ada5cf0d89f60f4d6a2e3439aa3323ba39cd6243f67235152718", 0xaf}, {&(0x7f0000001580)="2b3fe38af9aa3396104367873801debeb383ccf5042477f30b5bb9bd0e742495c49b056f83f2cf7ff1574f23dc9c1fc0875fa3c46d71c25a11e192023f98f1", 0x3f}, {&(0x7f00000015c0)="025d126e8247833bef2daa4e078a941a751d5b10e96fac7b15777f36cbb7dffe2ce5b6c8d7bf4d9596aa7c3cfe20653bc518d04678287e216b3e14234f685b2308ce24a6c5c265098c48e9c46aa66073e6bf693f0ce116fa00a1de833c60e4f12c473617692e4916a174b6aab88392f37723aad86f5022bdaaae466ddbd2ae99cd804abcbf6ad62943d63d34f298cb9ac2c99c7b04e9699778ffdf0e8fcf39611463962e0fa1823dfbe769a82b774f4977b7528b684318556cb063e70a89b9a57dda2f8929e57de188e0b0d70cb911bd9af084897663f3768bcce92557db801d49", 0xe1}, {&(0x7f0000002dc0)="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", 0x11a}, {&(0x7f00000016c0)="d720597b44fc335797f2dfb823d4076cc93a7ca0633cfc3c7219279a47d147c2cc564414c7dd94c8a164f6dc4770ea5652eb48f570e75c59b6bc74c7afcefd90e5fc41d6c01af456a36100b101071d1281150de91ed6f83f0031781630671daae7c32a34352233a46bf0255ed5d0983809ad427726a5fae8c5c407189bca58ef88", 0x81}, {&(0x7f0000001880)="64a018b8f416683c226baa7262d97219312f924a3191b1af6d4c4ae4ecf8087be4ccb5dd741ce355394d44e057689dfc5b3888df6ed01efa2a3a5690642cbec099707274e2ba3245436a19b84f24b0a3ac7661c3de253ec5af72737ec6f800be3bde15d63cd1ad9d8ca237e2153e85bcf9d8b24c036b532a335f7a7d4b0211570e8f0e9539e45034cd15e5e93d978a30a587d2708c898aaa52e69ea3e8ce24e638db3bdc4a01e961fb5c35def0dbf8c651c3c5fe70ccdb4625bf283ce1ba2f604bdd98c041c0452d6d2ca92d190ee1bfb749faa52eb01a116f9cf7a19bf8780160a9a2e164570df9", 0xe8}], 0x6, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x1208}}], 0x3, 0x805) openat$incfs(r1, &(0x7f0000000240)='.log\x00', 0x300, 0x2) sendfile(r0, r1, 0x0, 0x8400fffffffa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x80000007) write$P9_RREADLINK(r6, &(0x7f0000000180)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) 03:18:43 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 489.134617][ T7755] loop0: detected capacity change from 0 to 87 [ 489.141332][ T7756] loop1: detected capacity change from 0 to 87 [ 489.142827][ T7754] loop2: detected capacity change from 0 to 87 [ 489.173236][ T7755] attempt to access beyond end of device [ 489.173236][ T7755] loop0: rw=2049, want=230, limit=87 03:18:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) creat(&(0x7f0000000200)='./bus\x00', 0x5e) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000140)='./file1\x00', 0x1c1e40, 0x42) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)) perf_event_open(&(0x7f0000000240)={0x6, 0xfffffffffffffef5, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)=@random={'security.', 'msdos\x00'}, &(0x7f0000000300)=""/132, 0x84) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 489.207062][ T7755] attempt to access beyond end of device [ 489.207062][ T7755] loop0: rw=34817, want=190, limit=87 03:18:43 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)=@ipx={0x4, 0x6, 0x0, "0ec4c3ac42f4", 0x7}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000200)="d26917091fb4e3ba9d676a500c63e211191fba52423200869c940b82c481047291d00551b63c81d405d9ebd0eaf1392aaa223d3114efc75d050e2e4b1e3c1588614098af654b163808984db959022553ea120e35f680305420b6c9934d8e876aa3b5c557b5d07af16922792681d96fbf9aa50de8397bd72ce612aef917d9a760ffa9e53ae3552fa3c4a7352498755bd4d6df35930e34bb18ec77c4599aeb0438b5f7c5e95c31c861", 0xa8}, {&(0x7f0000000300)="264d06774ce44ce49fec44851c798e3321de8977cae50575899728fa26719fe81868061e047e20e9c0b2db4c1d14603f6380688c6098e7d84e3c18b171e73453ad4938d08d0fec760654ab27a67d6d6990ecaf50d7a53c72b8b6726de2ea9b8e3e430252c0a9460388448f8421c23e419dcbc86ce432bf6c4290541844e03fc2b69cd377563b718ed4d3f7ed", 0x8c}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="267b2d251783a2065967bb487edb029a55903fc338e2e074da369c8abcf23e41453485ae91548ce66db2c020c8a0543eb3636e9f68e8e84212f54b02fffeb455d0052888d24fce80292354a84842786c2fb706fd345682ec0b772c1c5ec34d4b67bbbeb5ff9f8d2cdf65a8cdb05c3acca38ac9c08ef94c1eeb8dcdbf923c2064fa1a38a05ea34dccb595e4c9df3426765c2372fbee3d0dfb", 0x98}, {&(0x7f0000001480)="1dce87ef737b18ea7e5079991c4c8216c7441ddc862f9fc84f0fc85b90110facfefe082e3801a39abfed888ef4dfc21ff4aed8696fac574abff4364eaab506a2fcecbb3670c8378a085be9c038c117c97a2530d69aeef02b429a52a7d1bb", 0x5e}], 0x5, &(0x7f0000001580)=[{0x58, 0x103, 0x7, "06554bec4ec4130aeaeeb7ef349fc581611f7493bc57bbed3650e27482d0a89c4e4a4cbc2dcb18288eba59ce8065178868830d099db0c0d89133df7c20e68a4e0bf399b330a209"}, {0x30, 0x118, 0xcda, "6a675d76a87af96b51c0e2f9dc0699417f7843e63e813b409d89a270650b"}, {0x30, 0x10b, 0x80000000, "a1cf340cb8f38a7d1bd62977a1135f4a016804d42b900914893b250de140af"}], 0xb8}, 0x20000000) lseek(r0, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fallocate(r3, 0x40, 0x3d, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000002140)=0x800000) sendfile(r4, r5, 0x0, 0x80000007) write$binfmt_aout(r4, &(0x7f0000001640)=ANY=[@ANYBLOB="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"/2813], 0xafd) [ 489.247778][ T7754] attempt to access beyond end of device [ 489.247778][ T7754] loop2: rw=2049, want=230, limit=87 03:18:43 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x10000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) openat2(r2, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300)={0x402000, 0x4, 0x6}, 0x18) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r3, &(0x7f0000000280)=ANY=[], 0x12) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4044884) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) 03:18:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) [ 489.370718][ T7794] loop0: detected capacity change from 0 to 87 [ 489.399944][ T7794] attempt to access beyond end of device [ 489.399944][ T7794] loop0: rw=2049, want=230, limit=87 [ 489.421054][ T7805] loop2: detected capacity change from 0 to 87 [ 489.426035][ T7807] loop4: detected capacity change from 0 to 87 [ 489.451337][ T7807] FAT-fs (loop4): bogus number of FAT sectors [ 489.457485][ T7807] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:44 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:18:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:18:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000100)="ba5adaf63f27d7d859697dce1c5342adb1aa940f034b34399b8ff1", 0x1b}, {&(0x7f0000000180)="f2dd5fb9fe4b4eaa31e1a2277b907aceb9156916dafca6496669da7fc0fe34600ddc51abec184cd1d58bf2c37be433c97c193b1a0b54acef38c5ba1cd857611c8cf531725092f58c3e6f44f72a0563e9ad8aeb1f18aac06049e322cc0a46f6c841c7444785cc94e8ea089563977e3b7365931fd8efdcf2f71151ef9d5bd6731ab4c7d410513ca9159e1297ef9b979e457ac9de2e2bb36b96c6dcf9bc14", 0x9d}, {&(0x7f0000000240)="cee9883ae3601ac67f", 0x9}, {&(0x7f0000001300)="6f9177ba48adcf2e5aea3239ac4ebf1017c33354b070ff3bdc34874f814cc8a5ee461d9bf2643b2ddc19e66a59716bae4274f5c366ec21c1443a990b3cd40d80e2f11427bbd979e7f532a0472d07f0c747fae6ee22094c9aaf423690ef6e5944e64d9b3430da9b77edf6d805ffd54f0be67d69309aa2bd54ba414666559b5504d92ece88500282283c1976c2a198d0cc8b61a492a66aaa40e8a22e9516a6dfe4a306a0e4", 0xa4}, {&(0x7f00000013c0)="d90778ce1ee8ff796146331746b6368fe8418e36f277fcee1cd25bff8c704a34f52d0c974c65ed498e6434f1d05cc8e1b9fee553d83dc3d3a34666f1e544a65260f313b08e610a48cb2f616b529dd9d697fe6c034e34dc9d350c671e3e4f477c4b54af0ca804e01ed349fd326fdedb585dce8454b6578fcb246b72f78def62f3c05fcac94889e01a2ff9d0bb9f9a281848adbf25cc09a7b27fcd5bcd5f65fc463990", 0xa2}], 0x6, 0x101, 0xffff) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:44 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 490.305668][ T7844] loop2: detected capacity change from 0 to 87 [ 490.317470][ T7850] loop0: detected capacity change from 0 to 87 [ 490.322524][ T7849] loop1: detected capacity change from 0 to 87 03:18:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x3) r1 = getuid() syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000400)='./file1\x00', 0x6, 0x5, &(0x7f0000000440)=[{&(0x7f00000001c0)="f77f1c60123e0ef9a0a4fd5a34a5afc5", 0x10, 0xffffffffffff979a}, {&(0x7f0000000200)="8123a2d19e6e2a5b0db2d9a40b5d5c1e7b404d9bfa014d9ba7b5e74058153e4fecee62ceb135d02ac7a492c14a76a0255623ff008b26f4f1c102d15b204d69e5e8d89d5b517caf1b07bc0c68c1f5200d79de6cd757b1c57297fd6de997e2ec0eabd58b9df8e0abfaa8827dda7618a3f2e8a0eefda50173d1934a18dc89f8ef41becc4d3156a9a77b02305f06938e0217e897f7b19a44b5528571", 0x9a, 0x6}, {&(0x7f0000000300)="7c6608462d26fade8cac54c47245fd08df675a20d0b5c698163568785644fc1856eba90363c71b6e649c48ed372999abdb16559d703eab56c25b5498fbc2a92cfe42e7990c7bae0ae69338b06d86900b5da468d99d6d627dad307335cd8016419eff213083464dbb1e7a05849b47e9338c5f76df1e511c70356eb31ef2538fbfc36e558bc149488196d7f08cf2c481867cddd128f61b1ec6fcd56d5cc16397fd5c23d54f960d715bf19d73197507ab2b4f2d38b15655ddea8f0d0feaea323983", 0xc0, 0x80}, {&(0x7f00000003c0)="a3d893d8cb8f3d41eb317ddd83b19a8c6d397c4f201cc10788ee770748a6e9d9014f6c723a7d77b043", 0x29, 0x9}, {&(0x7f0000000400), 0x0, 0x1}], 0x240000, &(0x7f00000004c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x65, 0x39, 0x36, 0x6d, 0x35, 0x0, 0x0]}}], [{@obj_user={'obj_user', 0x3d, 'msdos\x00'}}, {@hash}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_gt={'fowner>', r1}}, {@dont_appraise}, {@uid_lt}, {@hash}]}) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:18:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x2004c811}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r7, 0x10001, 0x0, 0x1f, 0x0, 0x0, {0x0, r8}}, 0x3ff) 03:18:44 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 490.413382][ T7872] loop2: detected capacity change from 0 to 87 [ 490.420108][ T7871] loop0: detected capacity change from 0 to 87 03:18:44 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=@newae={0x7c, 0x1e, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@rand_addr=0x64010102, 0x4d73, 0x2, 0x32}, @in=@private=0xa010102, 0x3ff}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd2b, 0x9}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @lifetime_val={0x24, 0x9, {0xb4, 0x800, 0x8, 0x8}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40084}, 0x20004040) r2 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r3, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) readlinkat(r2, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)=""/190, 0xbe) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) [ 490.510053][ T7891] loop4: detected capacity change from 0 to 87 [ 490.519270][ T7891] FAT-fs (loop4): bogus number of FAT sectors [ 490.525379][ T7891] FAT-fs (loop4): Can't find a valid FAT filesystem 03:18:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:18:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x20) truncate(&(0x7f0000000100)='./bus\x00', 0x40000) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() tkill(r0, 0x40) setrlimit(0x0, &(0x7f0000000080)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) 03:18:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 491.380903][ T7926] loop1: detected capacity change from 0 to 87 [ 491.396612][ T7927] loop2: detected capacity change from 0 to 87 [ 491.402914][ T7931] loop0: detected capacity change from 0 to 87 03:18:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:18:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:45 executing program 0: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000180)) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f00000000c0)='./bus\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x40, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESHEX]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'rdma'}, {0x2b, 'cpu'}]}, 0xb) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file1\x00', 0xd) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r4, r5, 0x0, 0x80000007) 03:18:45 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff4419, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000280)='./file1\x00', 0xf0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) listxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)=""/254, 0xfe) [ 491.550925][ T7963] loop2: detected capacity change from 0 to 87 [ 491.554285][ T7966] loop4: detected capacity change from 0 to 87 [ 491.567622][ T7968] loop0: detected capacity change from 0 to 87 03:18:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:46 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:18:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) chdir(&(0x7f0000000100)='./bus\x00') write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:46 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000000c0)='./bus\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x8}], 0x2800811, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESOCT]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) rmdir(&(0x7f00000001c0)='./file1\x00') ftruncate(r0, 0x9) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r3, r4, 0x0, 0x80000007) [ 491.796973][ T7999] loop2: detected capacity change from 0 to 87 [ 491.820919][ T8001] loop0: detected capacity change from 0 to 87 [ 491.838268][ T8001] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff01777777777777777777777" or missing value [ 491.893549][ T8019] loop4: detected capacity change from 0 to 87 [ 491.912974][ T8001] loop0: detected capacity change from 0 to 87 [ 491.920742][ T8001] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff01777777777777777777777" or missing value 03:18:46 executing program 1: chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:46 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x1, 'queue1\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x10000, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) write$P9_RWALK(r3, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="665ccb82e83434d4fdc7561da96a736128f5ac134feb5269fe287b48a553cc3363bee60d40a0f50aab0dac0446558413fba2817be2e1546db81cfcea663e53b48298cad9b4e6937f2d75a3f4b65aff95fbfc3487942adbfb123788afe56d1c40442dedde84c75f192dd255070e1a082626d9a4ccf3cb841535acd6d164f8825a0390394c0afec5b9937e3f93a56f9aed305825eaf24758f1a471c791d6640f3562f23ffe847117454339899dae7800", @ANYRES16=r2, @ANYBLOB="da51ddb9782d60c6ec8d9750928cd7b479136efb4e8e7142cdda0ae882c337c00d5bc38ff76b95b1c8f973c13fc44c49227293c18f3e8eec0e0b9a095f2fc28dc04ea18ac6aa9856dd7eef865cb1f9337cf835ae6e25b517cbb05df8df2f7f0cba8a80489b9b9cfabd65308552d36a7060eff235f9a5f7267f735e0f72b6f412243e5f5715d3d9f7bb9a5a729601ec31e816581cf2f7bfd9fbe23e8a431a4ba2e5610a5eb3729bfe3d384a278f7a1be1f1a6b90a062ca5183a26d0451fecfcc4a22d1a770ce8ddc80450"], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x19d) 03:18:46 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r1, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x80000007) write$P9_RREADLINK(r5, &(0x7f0000000100)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000008, 0x30, r3, 0xa4a0e000) sendfile(r0, r1, &(0x7f0000000080), 0x4) [ 492.236543][ T8037] loop0: detected capacity change from 0 to 87 [ 492.247920][ T8040] loop2: detected capacity change from 0 to 87 03:18:46 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 492.278725][ T8037] handle_bad_sector: 14 callbacks suppressed [ 492.278755][ T8037] attempt to access beyond end of device [ 492.278755][ T8037] loop0: rw=34817, want=190, limit=87 [ 492.309096][ T8040] attempt to access beyond end of device [ 492.309096][ T8040] loop2: rw=2049, want=230, limit=87 03:18:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 492.380631][ T8] attempt to access beyond end of device [ 492.380631][ T8] loop0: rw=1, want=230, limit=87 [ 492.448099][ T8068] loop2: detected capacity change from 0 to 87 [ 492.482808][ T8068] attempt to access beyond end of device [ 492.482808][ T8068] loop2: rw=2049, want=230, limit=87 03:18:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:47 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:47 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 492.811649][ T8085] loop2: detected capacity change from 0 to 87 03:18:47 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 492.851945][ T8085] attempt to access beyond end of device [ 492.851945][ T8085] loop2: rw=2049, want=230, limit=87 [ 492.953044][ T8105] loop4: detected capacity change from 0 to 87 03:18:47 executing program 1: chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:47 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 493.313930][ T8120] loop2: detected capacity change from 0 to 87 [ 493.356901][ T8120] attempt to access beyond end of device [ 493.356901][ T8120] loop2: rw=2049, want=230, limit=87 03:18:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) lsetxattr$security_evm(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x12, "cb0fdce46d25a6a80b442905381906"}, 0x11, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x2, 0x10) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r2 = syz_open_pts(r1, 0x1) flock(r2, 0x3) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 03:18:49 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:49 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:49 executing program 1: chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 495.754480][ T8149] loop2: detected capacity change from 0 to 87 [ 495.776556][ T8155] loop4: detected capacity change from 0 to 87 03:18:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 495.817538][ T8149] attempt to access beyond end of device [ 495.817538][ T8149] loop2: rw=2049, want=230, limit=87 03:18:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 495.972142][ T8188] loop2: detected capacity change from 0 to 87 03:18:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:50 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 496.039492][ T8188] attempt to access beyond end of device [ 496.039492][ T8188] loop2: rw=2049, want=230, limit=87 03:18:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 496.152292][ T8212] loop4: detected capacity change from 0 to 87 [ 496.199615][ T8222] loop2: detected capacity change from 0 to 87 [ 496.216866][ T8222] attempt to access beyond end of device [ 496.216866][ T8222] loop2: rw=2049, want=230, limit=87 03:18:50 executing program 1: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:50 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 496.684509][ T8242] loop1: detected capacity change from 0 to 87 03:18:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:51 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) 03:18:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 496.808086][ T8251] loop2: detected capacity change from 0 to 87 03:18:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 496.849368][ T8251] attempt to access beyond end of device [ 496.849368][ T8251] loop2: rw=2049, want=230, limit=87 03:18:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:51 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) 03:18:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 497.044557][ T8280] loop2: detected capacity change from 0 to 87 [ 497.139973][ T8296] loop4: detected capacity change from 0 to 87 03:18:51 executing program 1: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:51 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:51 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) [ 497.616848][ T8313] loop2: detected capacity change from 0 to 87 [ 497.660261][ T8313] handle_bad_sector: 1 callbacks suppressed [ 497.660279][ T8313] attempt to access beyond end of device [ 497.660279][ T8313] loop2: rw=2049, want=230, limit=87 [ 497.727796][ T8327] loop1: detected capacity change from 0 to 87 03:18:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 497.873323][ T8339] loop2: detected capacity change from 0 to 87 [ 497.899085][ T8339] attempt to access beyond end of device [ 497.899085][ T8339] loop2: rw=2049, want=230, limit=87 03:18:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:52 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) 03:18:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 498.026090][ T8361] loop2: detected capacity change from 0 to 87 [ 498.094564][ T8361] attempt to access beyond end of device [ 498.094564][ T8361] loop2: rw=2049, want=230, limit=87 [ 498.175018][ T8373] loop4: detected capacity change from 0 to 87 [ 498.224315][ T8373] attempt to access beyond end of device [ 498.224315][ T8373] loop4: rw=2049, want=230, limit=87 03:18:52 executing program 1: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:52 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) 03:18:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(0x0, 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:52 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 498.645428][ T8397] loop2: detected capacity change from 0 to 87 [ 498.674863][ T8397] attempt to access beyond end of device [ 498.674863][ T8397] loop2: rw=2049, want=230, limit=87 [ 498.695497][ T8397] attempt to access beyond end of device [ 498.695497][ T8397] loop2: rw=34817, want=190, limit=87 [ 498.714522][ T8408] loop1: detected capacity change from 0 to 87 03:18:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(0x0, 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:53 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) 03:18:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 498.878780][ T8424] loop4: detected capacity change from 0 to 87 [ 498.896143][ T8428] loop2: detected capacity change from 0 to 87 03:18:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 498.963318][ T8424] attempt to access beyond end of device [ 498.963318][ T8424] loop4: rw=2049, want=230, limit=87 [ 498.988646][ T8428] attempt to access beyond end of device [ 498.988646][ T8428] loop2: rw=2049, want=230, limit=87 [ 499.041050][ T8428] attempt to access beyond end of device [ 499.041050][ T8428] loop2: rw=34817, want=190, limit=87 03:18:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:53 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) 03:18:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(0x0, 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:18:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:53 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 499.675890][ T8470] loop2: detected capacity change from 0 to 87 [ 499.686274][ T8474] loop4: detected capacity change from 0 to 87 03:18:54 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 499.737922][ T8470] attempt to access beyond end of device [ 499.737922][ T8470] loop2: rw=2049, want=230, limit=87 03:18:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x80000007) 03:18:54 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:54 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 499.861631][ T8505] loop2: detected capacity change from 0 to 87 [ 499.875863][ T8508] loop4: detected capacity change from 0 to 87 [ 499.921119][ T8520] loop1: detected capacity change from 0 to 87 03:18:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:55 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) 03:18:55 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) 03:18:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:55 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 500.787125][ T8541] loop4: detected capacity change from 0 to 87 [ 500.802528][ T8545] loop2: detected capacity change from 0 to 87 03:18:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:55 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) [ 500.995730][ T8575] loop4: detected capacity change from 0 to 87 [ 501.003664][ T8576] loop2: detected capacity change from 0 to 87 [ 501.074691][ T8591] loop1: detected capacity change from 0 to 87 03:18:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:56 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) 03:18:56 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1902000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) 03:18:56 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1944ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 501.956822][ T8608] loop2: detected capacity change from 0 to 87 [ 501.986376][ T8616] loop4: detected capacity change from 0 to 87 03:18:56 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) 03:18:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:56 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r0, r1, 0x0, 0x80000007) [ 502.138903][ T8642] loop2: detected capacity change from 0 to 87 [ 502.163248][ T8645] loop4: detected capacity change from 0 to 87 [ 502.211597][ T8655] loop1: detected capacity change from 0 to 87 03:18:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) 03:18:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:57 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r0, r1, 0x0, 0x80000007) [ 503.081897][ T8668] loop4: detected capacity change from 0 to 87 [ 503.099413][ T8673] loop2: detected capacity change from 0 to 87 03:18:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5601000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 503.139103][ T8668] handle_bad_sector: 12 callbacks suppressed [ 503.139117][ T8668] attempt to access beyond end of device [ 503.139117][ T8668] loop4: rw=2049, want=230, limit=87 [ 503.176382][ T8673] attempt to access beyond end of device [ 503.176382][ T8673] loop2: rw=2049, want=230, limit=87 03:18:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) 03:18:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:57 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r0, r1, 0x0, 0x80000007) 03:18:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:57 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 503.326016][ T8706] loop2: detected capacity change from 0 to 87 [ 503.337998][ T8709] loop4: detected capacity change from 0 to 87 [ 503.381534][ T8706] attempt to access beyond end of device [ 503.381534][ T8706] loop2: rw=2049, want=230, limit=87 [ 503.394774][ T8720] FAT-fs (loop1): bogus number of reserved sectors [ 503.401352][ T8720] FAT-fs (loop1): Can't find a valid FAT filesystem [ 503.419250][ T8709] attempt to access beyond end of device [ 503.419250][ T8709] loop4: rw=2049, want=230, limit=87 03:18:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:58 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:18:58 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa202000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x0) 03:18:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:58 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 504.253782][ T8754] loop2: detected capacity change from 0 to 87 [ 504.272275][ T8757] loop4: detected capacity change from 0 to 87 03:18:58 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf402000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:58 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 504.337317][ T8757] attempt to access beyond end of device [ 504.337317][ T8757] loop4: rw=2049, want=230, limit=87 [ 504.344659][ T8754] attempt to access beyond end of device [ 504.344659][ T8754] loop2: rw=2049, want=230, limit=87 03:18:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x0) 03:18:58 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) [ 504.452290][ T8789] FAT-fs (loop1): bogus number of reserved sectors [ 504.458867][ T8789] FAT-fs (loop1): Can't find a valid FAT filesystem [ 504.466506][ T8790] loop4: detected capacity change from 0 to 87 [ 504.487678][ T8800] loop2: detected capacity change from 0 to 87 [ 504.500371][ T8790] attempt to access beyond end of device [ 504.500371][ T8790] loop4: rw=2049, want=230, limit=87 [ 504.528988][ T8800] attempt to access beyond end of device [ 504.528988][ T8800] loop2: rw=2049, want=230, limit=87 03:18:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:18:59 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x0) 03:18:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:59 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:18:59 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 505.347624][ T8833] loop2: detected capacity change from 0 to 87 [ 505.349830][ T8830] loop4: detected capacity change from 0 to 87 03:18:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:18:59 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:18:59 executing program 2: setrlimit(0xd71b5d66a44ed225, &(0x7f0000000100)={0x7ff, 0x8}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 505.421653][ T8833] attempt to access beyond end of device [ 505.421653][ T8833] loop2: rw=2049, want=230, limit=87 03:18:59 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:18:59 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 505.507988][ T8852] loop4: detected capacity change from 0 to 87 [ 505.564093][ T8864] loop2: detected capacity change from 0 to 87 [ 505.631676][ T8876] FAT-fs (loop1): bogus number of reserved sectors [ 505.638263][ T8876] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:00 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:00 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:19:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 506.499141][ T8895] loop4: detected capacity change from 0 to 87 [ 506.528764][ T8900] loop2: detected capacity change from 0 to 87 03:19:00 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 506.595469][ T8900] attempt to access beyond end of device [ 506.595469][ T8900] loop2: rw=2049, want=230, limit=87 03:19:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:00 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) [ 506.663933][ T8916] loop4: detected capacity change from 0 to 87 03:19:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:01 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 506.844838][ T8948] loop2: detected capacity change from 0 to 87 03:19:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:01 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:01 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 507.615148][ T8976] loop2: detected capacity change from 0 to 87 [ 507.622015][ T8977] loop4: detected capacity change from 0 to 87 03:19:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:01 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 507.786253][ T9007] loop2: detected capacity change from 0 to 87 [ 507.807468][ T9010] loop4: detected capacity change from 0 to 87 03:19:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:02 executing program 0: r0 = open(0x0, 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) 03:19:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) lseek(0xffffffffffffffff, 0x1200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:02 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 508.651737][ T9038] loop2: detected capacity change from 0 to 87 [ 508.686204][ T9047] loop4: detected capacity change from 0 to 87 03:19:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) lseek(0xffffffffffffffff, 0x1200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 508.749764][ T9055] loop2: detected capacity change from 0 to 87 03:19:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:03 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 508.823774][ T9068] loop4: detected capacity change from 0 to 87 [ 508.894666][ T9082] loop2: detected capacity change from 0 to 87 03:19:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:04 executing program 0: r0 = open(0x0, 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:04 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) lseek(0xffffffffffffffff, 0x1200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:04 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 509.803166][ T9101] loop4: detected capacity change from 0 to 87 [ 509.830360][ T9102] loop2: detected capacity change from 0 to 87 03:19:04 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) [ 509.884237][ T9117] loop4: detected capacity change from 0 to 87 03:19:04 executing program 0: r0 = open(0x0, 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:04 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 510.009385][ T9137] loop2: detected capacity change from 0 to 87 [ 510.079737][ T9148] loop1: detected capacity change from 0 to 87 [ 510.088240][ T9148] FAT-fs (loop1): bogus number of reserved sectors [ 510.094839][ T9148] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:05 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:05 executing program 5: r0 = creat(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:05 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 510.951588][ T9171] loop2: detected capacity change from 0 to 87 [ 510.971937][ T9175] loop4: detected capacity change from 0 to 87 03:19:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:05 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:05 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 511.118949][ T9203] loop4: detected capacity change from 0 to 87 [ 511.131216][ T9205] loop2: detected capacity change from 0 to 87 [ 511.155245][ T9210] loop1: detected capacity change from 0 to 87 [ 511.183932][ T9210] FAT-fs (loop1): bogus number of reserved sectors [ 511.190604][ T9210] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:06 executing program 5: r0 = creat(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:06 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:06 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 512.033727][ T9243] loop4: detected capacity change from 0 to 87 [ 512.041701][ T9244] loop2: detected capacity change from 0 to 87 03:19:06 executing program 5: r0 = creat(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x1f) 03:19:06 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 512.188754][ T9263] loop1: detected capacity change from 0 to 87 [ 512.220876][ T9263] FAT-fs (loop1): bogus number of reserved sectors [ 512.227580][ T9263] FAT-fs (loop1): Can't find a valid FAT filesystem [ 512.234934][ T9274] loop4: detected capacity change from 0 to 87 [ 512.268948][ T9286] loop2: detected capacity change from 0 to 87 03:19:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:07 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:07 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x1f) 03:19:07 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 513.062003][ T9309] loop4: detected capacity change from 0 to 87 [ 513.091219][ T9314] loop2: detected capacity change from 0 to 87 03:19:07 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x1f) 03:19:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:07 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 513.260460][ T9340] loop4: detected capacity change from 0 to 87 [ 513.270312][ T9343] loop2: detected capacity change from 0 to 87 [ 513.275548][ T9346] loop1: detected capacity change from 0 to 87 [ 513.317242][ T9346] FAT-fs (loop1): bogus number of reserved sectors [ 513.323805][ T9346] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:08 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:08 executing program 0: open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:19:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) [ 514.163407][ T9373] loop2: detected capacity change from 0 to 87 [ 514.199476][ T9380] loop4: detected capacity change from 0 to 87 03:19:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:08 executing program 0: open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:19:08 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 514.333378][ T9402] loop2: detected capacity change from 0 to 87 [ 514.352695][ T9405] loop4: detected capacity change from 0 to 87 [ 514.370286][ T9413] loop1: detected capacity change from 0 to 87 [ 514.394445][ T9413] FAT-fs (loop1): bogus number of reserved sectors [ 514.401135][ T9413] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:09 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:09 executing program 0: open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:19:09 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 515.234938][ T9442] loop4: detected capacity change from 0 to 87 [ 515.237030][ T9441] loop2: detected capacity change from 0 to 87 [ 515.274521][ T9442] handle_bad_sector: 2 callbacks suppressed 03:19:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:09 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 515.274536][ T9442] attempt to access beyond end of device [ 515.274536][ T9442] loop4: rw=2049, want=230, limit=87 03:19:09 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:09 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) [ 515.382209][ T9464] loop2: detected capacity change from 0 to 87 [ 515.402387][ T9471] loop1: detected capacity change from 0 to 87 [ 515.407920][ T9468] loop4: detected capacity change from 0 to 87 [ 515.418599][ T9471] FAT-fs (loop1): bogus number of reserved sectors [ 515.425176][ T9471] FAT-fs (loop1): Can't find a valid FAT filesystem [ 515.445055][ T9468] attempt to access beyond end of device [ 515.445055][ T9468] loop4: rw=2049, want=230, limit=87 03:19:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:10 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) 03:19:10 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:10 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 516.266067][ T9510] loop4: detected capacity change from 0 to 87 [ 516.274963][ T9512] loop2: detected capacity change from 0 to 87 03:19:10 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 516.317587][ T9510] attempt to access beyond end of device [ 516.317587][ T9510] loop4: rw=2049, want=230, limit=87 03:19:10 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000007) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r1, r2, 0x0, 0x80000007) [ 516.432610][ T9543] loop2: detected capacity change from 0 to 87 [ 516.456805][ T9547] loop4: detected capacity change from 0 to 87 [ 516.482920][ T9547] attempt to access beyond end of device [ 516.482920][ T9547] loop4: rw=2049, want=230, limit=87 [ 516.495502][ T9554] loop1: detected capacity change from 0 to 87 [ 516.503760][ T9554] FAT-fs (loop1): bogus number of reserved sectors [ 516.510335][ T9554] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:11 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:11 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x1f) 03:19:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:11 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:11 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x1f) [ 517.348941][ T9571] loop2: detected capacity change from 0 to 87 [ 517.388869][ T9579] loop4: detected capacity change from 0 to 87 03:19:11 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 517.424717][ T9579] attempt to access beyond end of device [ 517.424717][ T9579] loop4: rw=2049, want=230, limit=87 03:19:11 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x1f) [ 517.479971][ T9598] loop2: detected capacity change from 0 to 87 [ 517.561045][ T9615] loop1: detected capacity change from 0 to 87 [ 517.561551][ T9610] loop4: detected capacity change from 0 to 87 [ 517.571387][ T9613] loop2: detected capacity change from 0 to 87 [ 517.579700][ T9615] FAT-fs (loop1): bogus number of reserved sectors [ 517.586258][ T9615] FAT-fs (loop1): Can't find a valid FAT filesystem [ 517.625123][ T9610] attempt to access beyond end of device [ 517.625123][ T9610] loop4: rw=2049, want=230, limit=87 03:19:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:12 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 518.431943][ T9640] loop2: detected capacity change from 0 to 87 [ 518.441133][ T9641] loop4: detected capacity change from 0 to 87 [ 518.488902][ T9641] attempt to access beyond end of device [ 518.488902][ T9641] loop4: rw=2049, want=230, limit=87 03:19:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:12 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 518.652715][ T9674] loop1: detected capacity change from 0 to 87 [ 518.660723][ T9674] FAT-fs (loop1): bogus number of reserved sectors [ 518.666003][ T9676] loop4: detected capacity change from 0 to 87 [ 518.667299][ T9674] FAT-fs (loop1): Can't find a valid FAT filesystem [ 518.723850][ T9676] attempt to access beyond end of device [ 518.723850][ T9676] loop4: rw=2049, want=230, limit=87 03:19:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:13 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:13 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(0x0, 0x6) 03:19:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:13 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 519.527851][ T9707] loop2: detected capacity change from 0 to 87 [ 519.552248][ T9712] loop4: detected capacity change from 0 to 87 03:19:13 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(0x0, 0x6) [ 519.592516][ T9712] attempt to access beyond end of device [ 519.592516][ T9712] loop4: rw=2049, want=230, limit=87 03:19:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:13 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 519.723528][ T9740] loop4: detected capacity change from 0 to 87 [ 519.731746][ T9741] loop1: detected capacity change from 0 to 87 [ 519.746952][ T9741] FAT-fs (loop1): bogus number of reserved sectors [ 519.753598][ T9741] FAT-fs (loop1): Can't find a valid FAT filesystem [ 519.761435][ T9740] attempt to access beyond end of device [ 519.761435][ T9740] loop4: rw=2049, want=230, limit=87 03:19:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:14 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:14 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(0x0, 0x6) 03:19:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(0x0, 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:14 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:14 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 520.601036][ T9768] loop4: detected capacity change from 0 to 87 [ 520.635882][ T9776] loop2: detected capacity change from 0 to 87 03:19:14 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:14 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 520.673037][ T9768] attempt to access beyond end of device [ 520.673037][ T9768] loop4: rw=2049, want=230, limit=87 03:19:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x0) [ 520.824146][ T9805] loop1: detected capacity change from 0 to 87 [ 520.832576][ T9811] loop4: detected capacity change from 0 to 87 [ 520.839258][ T9805] FAT-fs (loop1): bogus number of reserved sectors [ 520.845851][ T9805] FAT-fs (loop1): Can't find a valid FAT filesystem [ 520.871968][ T9811] attempt to access beyond end of device [ 520.871968][ T9811] loop4: rw=2049, want=230, limit=87 03:19:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:15 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:15 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x0) 03:19:15 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) [ 521.695882][ T9843] loop4: detected capacity change from 0 to 87 [ 521.735565][ T9843] attempt to access beyond end of device [ 521.735565][ T9843] loop4: rw=2049, want=230, limit=87 03:19:16 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:16 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:16 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:16 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x0) 03:19:16 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:16 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 521.823798][ T9864] loop1: detected capacity change from 0 to 87 [ 521.838976][ T9864] FAT-fs (loop1): bogus number of reserved sectors [ 521.845538][ T9864] FAT-fs (loop1): Can't find a valid FAT filesystem [ 521.897961][ T9877] loop4: detected capacity change from 0 to 87 [ 521.945390][ T9877] attempt to access beyond end of device [ 521.945390][ T9877] loop4: rw=2049, want=230, limit=87 03:19:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:16 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:16 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:16 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:16 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:16 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:16 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:17 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 522.681593][ T9903] loop4: detected capacity change from 0 to 87 [ 522.699230][ T9903] attempt to access beyond end of device [ 522.699230][ T9903] loop4: rw=2049, want=230, limit=87 03:19:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:17 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:17 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 522.840120][ T9928] loop4: detected capacity change from 0 to 87 [ 522.878369][ T9928] attempt to access beyond end of device [ 522.878369][ T9928] loop4: rw=2049, want=230, limit=87 [ 522.904642][ T9941] loop1: detected capacity change from 0 to 87 [ 522.915172][ T9941] FAT-fs (loop1): invalid media value (0x00) [ 522.921202][ T9941] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:18 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:18 executing program 2: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 523.776026][ T9961] loop4: detected capacity change from 0 to 87 03:19:18 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 523.827810][ T9961] attempt to access beyond end of device [ 523.827810][ T9961] loop4: rw=2049, want=230, limit=87 03:19:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:18 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(0x0, 0x6) sendfile(r2, r3, 0x0, 0x80000007) [ 523.976578][ T9994] loop1: detected capacity change from 0 to 87 [ 523.994920][ T9997] loop4: detected capacity change from 0 to 87 [ 524.004895][ T9994] FAT-fs (loop1): invalid media value (0x00) [ 524.010914][ T9994] FAT-fs (loop1): Can't find a valid FAT filesystem [ 524.028944][ T9997] attempt to access beyond end of device [ 524.028944][ T9997] loop4: rw=2049, want=230, limit=87 03:19:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:19 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:19 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(0x0, 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:19 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:19 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:19 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 524.845762][T10026] loop2: detected capacity change from 0 to 87 [ 524.855809][T10029] loop4: detected capacity change from 0 to 87 03:19:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:19 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:19 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:19 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 525.027524][T10057] loop4: detected capacity change from 0 to 87 [ 525.028140][T10061] loop1: detected capacity change from 0 to 87 [ 525.059906][T10061] FAT-fs (loop1): invalid media value (0x00) [ 525.065959][T10061] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(0x0, 0x6) sendfile(r2, r3, 0x0, 0x80000007) 03:19:20 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:20 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:20 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:20 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 525.872023][T10089] loop2: detected capacity change from 0 to 87 [ 525.886869][T10092] loop4: detected capacity change from 0 to 87 03:19:20 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:20 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:20 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 526.000112][T10113] loop4: detected capacity change from 0 to 87 [ 526.011068][T10117] loop1: detected capacity change from 0 to 87 [ 526.036048][T10117] FAT-fs (loop1): invalid media value (0x00) [ 526.042153][T10117] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x80000007) 03:19:20 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 526.115814][T10129] loop4: detected capacity change from 0 to 87 03:19:20 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 526.252970][T10148] loop4: detected capacity change from 0 to 87 03:19:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:21 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) 03:19:21 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 526.905597][T10179] loop4: detected capacity change from 0 to 87 [ 526.916445][T10178] loop2: detected capacity change from 0 to 87 [ 526.971711][T10177] ================================================================== [ 526.979815][T10177] BUG: KCSAN: data-race in ext4_file_write_iter / ext4_setattr [ 526.987376][T10177] [ 526.989694][T10177] write to 0xffff8881330b1b48 of 8 bytes by task 10189 on cpu 0: [ 526.997410][T10177] ext4_setattr+0xd7f/0xef0 [ 527.001924][T10177] notify_change+0x8a3/0xac0 [ 527.006529][T10177] vfs_truncate+0x2f7/0x380 [ 527.011039][T10177] __x64_sys_truncate+0xb0/0x130 [ 527.015980][T10177] do_syscall_64+0x44/0xa0 [ 527.020404][T10177] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 527.026304][T10177] [ 527.028626][T10177] read to 0xffff8881330b1b48 of 8 bytes by task 10177 on cpu 1: [ 527.036252][T10177] ext4_file_write_iter+0x14c/0x11f0 [ 527.041543][T10177] do_iter_readv_writev+0x2de/0x380 [ 527.046762][T10177] do_iter_write+0x192/0x5c0 [ 527.051392][T10177] vfs_iter_write+0x4c/0x70 [ 527.055909][T10177] iter_file_splice_write+0x43a/0x790 [ 527.061286][T10177] direct_splice_actor+0x80/0xa0 [ 527.066224][T10177] splice_direct_to_actor+0x345/0x650 [ 527.071597][T10177] do_splice_direct+0x106/0x190 [ 527.076444][T10177] do_sendfile+0x63e/0xbb0 [ 527.077250][T10199] loop1: detected capacity change from 0 to 87 [ 527.080866][T10177] __x64_sys_sendfile64+0x102/0x140 [ 527.080894][T10177] do_syscall_64+0x44/0xa0 [ 527.080916][T10177] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 527.102671][T10177] [ 527.104986][T10177] value changed: 0x00000000000d0000 -> 0x0000000000000000 [ 527.112092][T10177] [ 527.114412][T10177] Reported by Kernel Concurrency Sanitizer on: 03:19:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 527.120554][T10177] CPU: 1 PID: 10177 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 527.129496][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.139663][T10177] ================================================================== 03:19:21 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 527.199658][T10205] loop4: detected capacity change from 0 to 87 03:19:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:21 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 527.262366][T10199] FAT-fs (loop1): invalid media value (0x00) [ 527.268400][T10199] FAT-fs (loop1): Can't find a valid FAT filesystem [ 527.346246][T10227] loop4: detected capacity change from 0 to 87 03:19:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:22 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) 03:19:22 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:22 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:22 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 527.950842][T10251] loop4: detected capacity change from 0 to 87 [ 527.967571][T10250] loop2: detected capacity change from 0 to 87 [ 527.986021][T10251] attempt to access beyond end of device [ 527.986021][T10251] loop4: rw=2049, want=230, limit=87 03:19:22 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000007) 03:19:22 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000007) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:22 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 528.068275][T10272] loop1: detected capacity change from 0 to 87 [ 528.090097][T10272] FAT-fs (loop1): invalid media value (0x00) [ 528.096179][T10272] FAT-fs (loop1): Can't find a valid FAT filesystem [ 528.098091][T10277] loop4: detected capacity change from 0 to 87 03:19:22 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 528.171093][T10277] attempt to access beyond end of device [ 528.171093][T10277] loop4: rw=2049, want=230, limit=87 03:19:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:23 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) 03:19:23 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) [ 528.911558][T10309] loop4: detected capacity change from 0 to 87 03:19:23 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:23 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 528.952062][T10309] attempt to access beyond end of device [ 528.952062][T10309] loop4: rw=2049, want=230, limit=87 [ 528.981709][T10321] loop2: detected capacity change from 0 to 87 03:19:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:23 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:23 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 529.086729][T10342] loop4: detected capacity change from 0 to 87 [ 529.112100][T10345] loop1: detected capacity change from 0 to 87 03:19:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) [ 529.143764][T10345] FAT-fs (loop1): bogus number of FAT sectors [ 529.149864][T10345] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:24 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:24 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000007) 03:19:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:24 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 529.987410][T10384] loop4: detected capacity change from 0 to 87 [ 529.989324][T10387] loop2: detected capacity change from 0 to 87 03:19:24 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:24 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(0x0, 0x6) 03:19:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x0) 03:19:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:24 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 530.181082][T10413] loop1: detected capacity change from 0 to 87 [ 530.231041][T10413] FAT-fs (loop1): bogus number of FAT sectors [ 530.237171][T10413] FAT-fs (loop1): Can't find a valid FAT filesystem [ 530.258470][T10430] loop4: detected capacity change from 0 to 87 03:19:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x0) 03:19:25 executing program 4: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:25 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(0x0, 0x6) 03:19:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 531.059198][T10459] FAT-fs (loop2): bogus number of reserved sectors [ 531.065834][T10459] FAT-fs (loop2): Can't find a valid FAT filesystem 03:19:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 531.132368][T10472] loop1: detected capacity change from 0 to 87 03:19:25 executing program 4: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x0) [ 531.181880][T10472] FAT-fs (loop1): bogus number of FAT sectors [ 531.187998][T10472] FAT-fs (loop1): Can't find a valid FAT filesystem 03:19:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:25 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:26 executing program 4: chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:26 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x80000007) (fail_nth: 1) 03:19:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:26 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(0x0, 0x6) 03:19:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 532.037159][T10522] FAT-fs (loop2): bogus number of reserved sectors [ 532.043717][T10522] FAT-fs (loop2): Can't find a valid FAT filesystem 03:19:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 532.089125][T10534] loop1: detected capacity change from 0 to 87 [ 532.136394][T10536] FAULT_INJECTION: forcing a failure. [ 532.136394][T10536] name failslab, interval 1, probability 0, space 0, times 0 [ 532.149065][T10536] CPU: 0 PID: 10536 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 532.157848][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.167904][T10536] Call Trace: [ 532.171185][T10536] dump_stack_lvl+0xd6/0x122 [ 532.175796][T10536] dump_stack+0x11/0x1b [ 532.179959][T10536] should_fail+0x23c/0x250 [ 532.184420][T10536] __should_failslab+0x81/0x90 [ 532.189190][T10536] ? alloc_pipe_info+0xac/0x350 [ 532.194055][T10536] should_failslab+0x5/0x20 [ 532.198567][T10536] kmem_cache_alloc_trace+0x52/0x320 [ 532.203859][T10536] alloc_pipe_info+0xac/0x350 [ 532.208585][T10536] splice_direct_to_actor+0x5f7/0x650 [ 532.213961][T10536] ? security_file_permission+0x7c/0xa0 [ 532.219516][T10536] ? do_splice_direct+0x190/0x190 [ 532.224620][T10536] ? security_file_permission+0x87/0xa0 [ 532.230172][T10536] do_splice_direct+0x106/0x190 [ 532.235029][T10536] do_sendfile+0x63e/0xbb0 [ 532.239463][T10536] __x64_sys_sendfile64+0x102/0x140 [ 532.244676][T10536] do_syscall_64+0x44/0xa0 [ 532.249172][T10536] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 532.255143][T10536] RIP: 0033:0x7fac90e74709 [ 532.259557][T10536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:19:26 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 532.279173][T10536] RSP: 002b:00007fac8ebcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 532.287605][T10536] RAX: ffffffffffffffda RBX: 00007fac90f79020 RCX: 00007fac90e74709 [ 532.295577][T10536] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 532.303716][T10536] RBP: 00007fac8ebcb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.311689][T10536] R10: 0000000080000007 R11: 0000000000000246 R12: 0000000000000001 [ 532.319667][T10536] R13: 00007ffeb74b6f5f R14: 00007fac8ebcb300 R15: 0000000000022000 03:19:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:26 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 532.388567][T10552] loop4: detected capacity change from 0 to 87 03:19:26 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x80000007) (fail_nth: 2) [ 532.566860][T10566] FAULT_INJECTION: forcing a failure. [ 532.566860][T10566] name failslab, interval 1, probability 0, space 0, times 0 [ 532.579526][T10566] CPU: 0 PID: 10566 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 532.588292][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.598346][T10566] Call Trace: [ 532.601665][T10566] dump_stack_lvl+0xd6/0x122 [ 532.606269][T10566] dump_stack+0x11/0x1b [ 532.610545][T10566] should_fail+0x23c/0x250 [ 532.614953][T10566] ? kcalloc+0x32/0x40 [ 532.619024][T10566] __should_failslab+0x81/0x90 [ 532.623789][T10566] should_failslab+0x5/0x20 [ 532.628296][T10566] __kmalloc+0x6f/0x350 [ 532.632497][T10566] ? alloc_pipe_info+0xac/0x350 [ 532.637345][T10566] kcalloc+0x32/0x40 [ 532.641240][T10566] alloc_pipe_info+0x1be/0x350 [ 532.646004][T10566] splice_direct_to_actor+0x5f7/0x650 [ 532.651379][T10566] ? security_file_permission+0x7c/0xa0 [ 532.656956][T10566] ? do_splice_direct+0x190/0x190 [ 532.661985][T10566] ? security_file_permission+0x87/0xa0 [ 532.667540][T10566] do_splice_direct+0x106/0x190 [ 532.672394][T10566] do_sendfile+0x63e/0xbb0 [ 532.676811][T10566] __x64_sys_sendfile64+0x102/0x140 [ 532.682025][T10566] do_syscall_64+0x44/0xa0 [ 532.686518][T10566] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 532.692515][T10566] RIP: 0033:0x7fac90e74709 [ 532.696963][T10566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 532.716699][T10566] RSP: 002b:00007fac8ebcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 532.725119][T10566] RAX: ffffffffffffffda RBX: 00007fac90f79020 RCX: 00007fac90e74709 [ 532.733138][T10566] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 532.741107][T10566] RBP: 00007fac8ebcb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.749113][T10566] R10: 0000000080000007 R11: 0000000000000246 R12: 0000000000000001 [ 532.757091][T10566] R13: 00007ffeb74b6f5f R14: 00007fac8ebcb300 R15: 0000000000022000 03:19:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:27 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:27 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x0) 03:19:27 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x80000007) (fail_nth: 3) 03:19:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 532.987147][T10576] loop4: detected capacity change from 0 to 87 [ 533.017328][T10580] FAT-fs (loop2): bogus number of reserved sectors [ 533.023895][T10580] FAT-fs (loop2): Can't find a valid FAT filesystem 03:19:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 533.090495][T10601] FAULT_INJECTION: forcing a failure. [ 533.090495][T10601] name failslab, interval 1, probability 0, space 0, times 0 [ 533.103256][T10601] CPU: 0 PID: 10601 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 533.112078][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.113726][T10607] loop1: detected capacity change from 0 to 87 [ 533.122130][T10601] Call Trace: [ 533.122141][T10601] dump_stack_lvl+0xd6/0x122 [ 533.122166][T10601] dump_stack+0x11/0x1b 03:19:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x156, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 533.122215][T10601] should_fail+0x23c/0x250 [ 533.122232][T10601] ? kmalloc_array+0x2d/0x40 [ 533.122256][T10601] __should_failslab+0x81/0x90 [ 533.154166][T10601] should_failslab+0x5/0x20 [ 533.158678][T10601] __kmalloc+0x6f/0x350 [ 533.162919][T10601] kmalloc_array+0x2d/0x40 [ 533.167476][T10601] iter_file_splice_write+0xd5/0x790 [ 533.172796][T10601] ? atime_needs_update+0x2ba/0x390 [ 533.178020][T10601] ? touch_atime+0xe0/0x250 [ 533.182530][T10601] ? generic_file_splice_read+0x2a9/0x330 03:19:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 533.188312][T10601] ? splice_from_pipe+0xd0/0xd0 [ 533.193167][T10601] direct_splice_actor+0x80/0xa0 [ 533.198117][T10601] splice_direct_to_actor+0x345/0x650 [ 533.203497][T10601] ? do_splice_direct+0x190/0x190 [ 533.208531][T10601] do_splice_direct+0x106/0x190 [ 533.213489][T10601] do_sendfile+0x63e/0xbb0 [ 533.217924][T10601] __x64_sys_sendfile64+0x102/0x140 [ 533.223131][T10601] do_syscall_64+0x44/0xa0 [ 533.227587][T10601] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 533.233580][T10601] RIP: 0033:0x7fac90e74709 03:19:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x219, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:27 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 533.238088][T10601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 533.257837][T10601] RSP: 002b:00007fac8ebcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 533.266256][T10601] RAX: ffffffffffffffda RBX: 00007fac90f79020 RCX: 00007fac90e74709 [ 533.274229][T10601] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 533.282213][T10601] RBP: 00007fac8ebcb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 533.290282][T10601] R10: 0000000080000007 R11: 0000000000000246 R12: 0000000000000001 [ 533.298253][T10601] R13: 00007ffeb74b6f5f R14: 00007fac8ebcb300 R15: 0000000000022000 03:19:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:28 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:28 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x0) 03:19:28 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:28 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x80000007) (fail_nth: 4) 03:19:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) [ 534.000278][T10636] loop4: detected capacity change from 0 to 87 03:19:28 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f4, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:28 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 534.102320][T10645] FAULT_INJECTION: forcing a failure. [ 534.102320][T10645] name failslab, interval 1, probability 0, space 0, times 0 [ 534.115011][T10645] CPU: 0 PID: 10645 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 534.123784][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.133843][T10645] Call Trace: [ 534.139056][T10645] dump_stack_lvl+0xd6/0x122 [ 534.143729][T10645] dump_stack+0x11/0x1b [ 534.147894][T10645] should_fail+0x23c/0x250 [ 534.152319][T10645] __should_failslab+0x81/0x90 [ 534.157089][T10645] ? __iomap_dio_rw+0x139/0x1010 [ 534.162131][T10645] should_failslab+0x5/0x20 [ 534.166670][T10645] kmem_cache_alloc_trace+0x52/0x320 [ 534.171970][T10645] __iomap_dio_rw+0x139/0x1010 [ 534.176765][T10645] ? finish_task_switch+0xce/0x290 [ 534.181884][T10645] iomap_dio_rw+0x30/0x70 [ 534.186234][T10645] ext4_file_write_iter+0xaa9/0x11f0 [ 534.191527][T10645] do_iter_readv_writev+0x2de/0x380 [ 534.196747][T10645] do_iter_write+0x192/0x5c0 [ 534.201346][T10645] ? splice_from_pipe_next+0x34f/0x3b0 [ 534.206810][T10645] ? kmalloc_array+0x2d/0x40 [ 534.211471][T10645] vfs_iter_write+0x4c/0x70 [ 534.215973][T10645] iter_file_splice_write+0x43a/0x790 [ 534.221407][T10645] ? splice_from_pipe+0xd0/0xd0 [ 534.226268][T10645] direct_splice_actor+0x80/0xa0 [ 534.231238][T10645] splice_direct_to_actor+0x345/0x650 [ 534.236615][T10645] ? do_splice_direct+0x190/0x190 [ 534.241642][T10645] do_splice_direct+0x106/0x190 [ 534.246489][T10645] do_sendfile+0x63e/0xbb0 [ 534.250909][T10645] __x64_sys_sendfile64+0x102/0x140 [ 534.256135][T10645] do_syscall_64+0x44/0xa0 [ 534.260624][T10645] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 534.266519][T10645] RIP: 0033:0x7fac90e74709 [ 534.270931][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.290575][T10645] RSP: 002b:00007fac8ebcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 534.298992][T10645] RAX: ffffffffffffffda RBX: 00007fac90f79020 RCX: 00007fac90e74709 [ 534.306969][T10645] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 534.314941][T10645] RBP: 00007fac8ebcb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.322913][T10645] R10: 0000000080000007 R11: 0000000000000246 R12: 0000000000000001 [ 534.330886][T10645] R13: 00007ffeb74b6f5f R14: 00007fac8ebcb300 R15: 0000000000022000 03:19:28 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:28 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 534.375919][T10660] loop1: detected capacity change from 0 to 87 03:19:28 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:28 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 534.496469][T10676] loop4: detected capacity change from 0 to 87 03:19:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x80000007) 03:19:29 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x0) 03:19:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 535.276373][T10700] loop4: detected capacity change from 0 to 87 03:19:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 535.397501][T10726] loop1: detected capacity change from 0 to 87 03:19:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:29 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) [ 535.509308][T10736] loop4: detected capacity change from 0 to 87 03:19:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) set_mempolicy(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 03:19:30 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) 03:19:30 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r2, r3, 0x0, 0x8000000c) 03:19:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x4) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1f) 03:19:30 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000007) sendfile(r0, r1, 0x0, 0x8400fffffffa) truncate(&(0x7f0000000080)='./bus\x00', 0x6) (fail_nth: 1) 03:19:30 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 536.290982][T10768] FAT-fs (loop4): bogus number of reserved sectors [ 536.297663][T10768] FAT-fs (loop4): Can't find a valid FAT filesystem 03:19:30 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:30 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 536.395880][T10789] loop1: detected capacity change from 0 to 87 03:19:30 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1902, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:19:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000007) truncate(&(0x7f0000000080)='./bus\x00', 0x6) [ 536.559164][T10812] FAULT_INJECTION: forcing a failure. [ 536.559164][T10812] name failslab, interval 1, probability 0, space 0, times 0 [ 536.571910][T10812] CPU: 1 PID: 10812 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 536.580779][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.590927][T10812] Call Trace: [ 536.594207][T10812] dump_stack_lvl+0xd6/0x122 [ 536.599368][T10812] dump_stack+0x11/0x1b [ 536.603545][T10812] should_fail+0x23c/0x250 [ 536.607973][T10812] ? getname_flags+0x84/0x3f0 [ 536.612668][T10812] __should_failslab+0x81/0x90 [ 536.617436][T10812] should_failslab+0x5/0x20 [ 536.622030][T10812] kmem_cache_alloc+0x4f/0x300 [ 536.626789][T10812] getname_flags+0x84/0x3f0 [ 536.631364][T10812] ? __cond_resched+0x11/0x40 [ 536.636137][T10812] user_path_at_empty+0x28/0x110 [ 536.641086][T10812] __x64_sys_truncate+0x85/0x130 [ 536.646057][T10812] do_syscall_64+0x44/0xa0 [ 536.650591][T10812] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 536.656500][T10812] RIP: 0033:0x7f3d4b04b709 [ 536.660919][T10812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 536.680650][T10812] RSP: 002b:00007f3d48d81188 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 536.689065][T10812] RAX: ffffffffffffffda RBX: 00007f3d4b1500e0 RCX: 00007f3d4b04b709 [ 536.697039][T10812] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000020000080 03:19:31 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c02, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 536.705006][T10812] RBP: 00007f3d48d811d0 R08: 0000000000000000 R09: 0000000000000000 [ 536.712985][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.720965][T10812] R13: 00007fffc6fc76ef R14: 00007f3d48d81300 R15: 0000000000022000 [ 536.746055][T10810] FAT-fs (loop4): Unrecognized mount option "./bus" or missing value