ng=") (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x21) (rerun: 32) [ 1974.756744][T30253] loop1: detected capacity change from 0 to 64 18:07:15 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) ioperm(0x36d, 0x0, 0x0) 18:07:15 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, 0x0, 0x0) 18:07:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) 18:07:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) ioperm(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 18:07:15 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfffffff8, 0x3, 0xfff, 0x101, 0x5, "9ac363b9a77f774544e3c8084700ad9b694ed2", 0xa, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x3, 0x1, 0x88, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x7, 0x7800, 0x9ab, 0x5}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x44, 0x6a, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf3) 18:07:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) 18:07:15 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 18:07:15 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfffffff8, 0x3, 0xfff, 0x101, 0x5, "9ac363b9a77f774544e3c8084700ad9b694ed2", 0xa, 0x6}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x3, 0x1, 0x88, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x7, 0x7800, 0x9ab, 0x5}}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x44, 0x6a, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf3) [ 1975.554781][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.561294][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 18:07:16 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 18:07:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) 18:07:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) ioperm(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, 0x0, 0x0) 18:07:16 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfffffff8, 0x3, 0xfff, 0x101, 0x5, "9ac363b9a77f774544e3c8084700ad9b694ed2", 0xa, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x3, 0x1, 0x88, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x7, 0x7800, 0x9ab, 0x5}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x44, 0x6a, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf3) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfffffff8, 0x3, 0xfff, 0x101, 0x5, "9ac363b9a77f774544e3c8084700ad9b694ed2", 0xa, 0x6}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) (async) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x7f, 0x3, 0x1, 0x88, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x7, 0x7800, 0x9ab, 0x5}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) (async) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0x44, 0x6a, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf3) (async) 18:07:16 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 18:07:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) 18:07:16 executing program 1: readlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)=""/60, 0x3c) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file2\x00', r0, &(0x7f0000000080)='./file0\x00') 18:07:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) ioperm(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 18:07:16 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:16 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:07:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) [ 1976.464040][T30595] loop1: detected capacity change from 0 to 64 18:07:16 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 1976.534949][T30595] syz-executor.1: attempt to access beyond end of device [ 1976.534949][T30595] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:16 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 1976.600314][T30595] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) [ 1976.666604][T30595] syz-executor.1: attempt to access beyond end of device [ 1976.666604][T30595] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1976.752769][T30595] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1976.816618][ T28] audit: type=1800 audit(1703095636.849:2700): pid=30595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:17 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x34}}, 0x0) 18:07:17 executing program 0: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) ioperm(0x36d, 0x0, 0x0) ioperm(0x0, 0xea, 0x0) open$dir(0x0, 0x0, 0x0) 18:07:17 executing program 1: readlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)=""/60, 0x3c) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file2\x00', r0, &(0x7f0000000080)='./file0\x00') 18:07:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) 18:07:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) [ 1977.178956][T30721] loop1: detected capacity change from 0 to 64 [ 1977.206236][T30721] syz-executor.1: attempt to access beyond end of device [ 1977.206236][T30721] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1977.230343][T30721] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1977.252253][T30721] syz-executor.1: attempt to access beyond end of device [ 1977.252253][T30721] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1977.313927][T30721] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1977.385273][ T28] audit: type=1800 audit(1703095637.429:2701): pid=30721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r2, r1, 0x0) 18:07:17 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x34}}, 0x0) 18:07:17 executing program 1: readlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)=""/60, 0x3c) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file2\x00', r0, &(0x7f0000000080)='./file0\x00') 18:07:17 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) 18:07:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) ioperm(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 18:07:17 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x34}}, 0x0) 18:07:17 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x34, r0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x34}}, 0x0) 18:07:17 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x34, r0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x34}}, 0x0) 18:07:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) dup3(0xffffffffffffffff, r1, 0x0) 18:07:18 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sane', 0x87282, 0x20) getdents64(r0, &(0x7f0000000080)=""/101, 0x65) 18:07:18 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x34, r0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x34}}, 0x0) 18:07:18 executing program 0: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) ioperm(0x36d, 0x0, 0x0) ioperm(0x0, 0xea, 0x0) open$dir(0x0, 0x0, 0x0) 18:07:18 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) [ 1978.450314][T30948] loop1: detected capacity change from 0 to 64 18:07:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) dup3(0xffffffffffffffff, r1, 0x0) 18:07:18 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x0) [ 1978.519126][T30948] syz-executor.1: attempt to access beyond end of device [ 1978.519126][T30948] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1978.544066][T30948] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) dup3(0xffffffffffffffff, r1, 0x0) [ 1978.599313][T30948] syz-executor.1: attempt to access beyond end of device [ 1978.599313][T30948] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1978.656735][T30948] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1978.715813][ T28] audit: type=1800 audit(1703095638.759:2702): pid=30948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:18 executing program 3: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, 0xffffffffffffffff, 0x0) 18:07:18 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sane', 0x87282, 0x20) getdents64(r0, &(0x7f0000000080)=""/101, 0x65) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sane', 0x87282, 0x20) (async) getdents64(r0, &(0x7f0000000080)=""/101, 0x65) (async) 18:07:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, 0xffffffffffffffff, 0x0) 18:07:19 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) [ 1978.985251][T31065] loop1: detected capacity change from 0 to 64 [ 1979.019215][T31065] syz-executor.1: attempt to access beyond end of device [ 1979.019215][T31065] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:19 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) 18:07:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r1, 0xffffffffffffffff, 0x0) [ 1979.156910][T31065] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1979.235306][ T28] audit: type=1800 audit(1703095639.289:2703): pid=31065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:19 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x80010000) 18:07:19 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) 18:07:19 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_sane', 0x87282, 0x20) getdents64(r0, &(0x7f0000000080)=""/101, 0x65) 18:07:19 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) 18:07:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) ioperm(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1979.652816][T31181] loop1: detected capacity change from 0 to 64 18:07:20 executing program 3: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x80010000) 18:07:20 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}}, 0x0) 18:07:20 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x20, 0xc, 0x1, 0xfffffffc00000000, 0x0, 0x3e, 0x5, 0x2d1, 0x38, 0x326, 0x3, 0xff, 0x20, 0x2, 0x2, 0x43c5}, [{0x4, 0x8, 0xffffffff, 0x4, 0xfff, 0xfffffffe, 0x3, 0x2}, {0x3, 0x401, 0x1, 0x7, 0xfff, 0x0, 0x1, 0x2380}], "a9b98442c1e77efa8dc1919d52f7b2c7ca51e18d7efc70", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98f) 18:07:20 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}}, 0x0) [ 1980.212561][T31298] loop1: detected capacity change from 0 to 64 [ 1980.269603][T31298] syz-executor.1: attempt to access beyond end of device [ 1980.269603][T31298] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x80010000) [ 1980.361047][T31298] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:20 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}}, 0x0) [ 1980.441471][T31298] syz-executor.1: attempt to access beyond end of device [ 1980.441471][T31298] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:20 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x74000000) [ 1980.497016][T31298] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1980.540239][ T28] audit: type=1800 audit(1703095640.599:2704): pid=31298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:20 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) 18:07:20 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:20 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x20, 0xc, 0x1, 0xfffffffc00000000, 0x0, 0x3e, 0x5, 0x2d1, 0x38, 0x326, 0x3, 0xff, 0x20, 0x2, 0x2, 0x43c5}, [{0x4, 0x8, 0xffffffff, 0x4, 0xfff, 0xfffffffe, 0x3, 0x2}, {0x3, 0x401, 0x1, 0x7, 0xfff, 0x0, 0x1, 0x2380}], "a9b98442c1e77efa8dc1919d52f7b2c7ca51e18d7efc70", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98f) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) write$binfmt_elf32(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x20, 0xc, 0x1, 0xfffffffc00000000, 0x0, 0x3e, 0x5, 0x2d1, 0x38, 0x326, 0x3, 0xff, 0x20, 0x2, 0x2, 0x43c5}, [{0x4, 0x8, 0xffffffff, 0x4, 0xfff, 0xfffffffe, 0x3, 0x2}, {0x3, 0x401, 0x1, 0x7, 0xfff, 0x0, 0x1, 0x2380}], "a9b98442c1e77efa8dc1919d52f7b2c7ca51e18d7efc70", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98f) (async) 18:07:20 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r10, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$rxrpc(0x21, 0x2, 0xa) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r14, @ANYBLOB="ff830500000000000000", @ANYRES32=r13], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r14, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0108000300"/18, @ANYRES32=r15], 0x44}}, 0x0) r16 = openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r16, 0xc06864b8, &(0x7f00000005c0)={r5, 0x8, 0xffffffff, 0x9, 0x3, [r17, r18, r19, r7], [0x9, 0x8, 0x0, 0xbed0], [0x20, 0x8, 0x100, 0xa], [0x81, 0x2, 0xff, 0x9]}) [ 1980.920255][T31417] loop1: detected capacity change from 0 to 64 [ 1980.953894][T31417] syz-executor.1: attempt to access beyond end of device [ 1980.953894][T31417] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1980.971583][T31417] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1980.986130][T31417] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1981.034460][ T28] audit: type=1800 audit(1703095641.089:2705): pid=31417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1981.054490][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x74000000) 18:07:21 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 18:07:21 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r10, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$rxrpc(0x21, 0x2, 0xa) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r14, @ANYBLOB="ff830500000000000000", @ANYRES32=r13], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r14, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0108000300"/18, @ANYRES32=r15], 0x44}}, 0x0) r16 = openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r16, 0xc06864b8, &(0x7f00000005c0)={r5, 0x8, 0xffffffff, 0x9, 0x3, [r17, r18, r19, r7], [0x9, 0x8, 0x0, 0xbed0], [0x20, 0x8, 0x100, 0xa], [0x81, 0x2, 0xff, 0x9]}) 18:07:21 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x20, 0xc, 0x1, 0xfffffffc00000000, 0x0, 0x3e, 0x5, 0x2d1, 0x38, 0x326, 0x3, 0xff, 0x20, 0x2, 0x2, 0x43c5}, [{0x4, 0x8, 0xffffffff, 0x4, 0xfff, 0xfffffffe, 0x3, 0x2}, {0x3, 0x401, 0x1, 0x7, 0xfff, 0x0, 0x1, 0x2380}], "a9b98442c1e77efa8dc1919d52f7b2c7ca51e18d7efc70", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98f) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) write$binfmt_elf32(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x20, 0xc, 0x1, 0xfffffffc00000000, 0x0, 0x3e, 0x5, 0x2d1, 0x38, 0x326, 0x3, 0xff, 0x20, 0x2, 0x2, 0x43c5}, [{0x4, 0x8, 0xffffffff, 0x4, 0xfff, 0xfffffffe, 0x3, 0x2}, {0x3, 0x401, 0x1, 0x7, 0xfff, 0x0, 0x1, 0x2380}], "a9b98442c1e77efa8dc1919d52f7b2c7ca51e18d7efc70", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98f) (async) 18:07:21 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x20000000) 18:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x74000000) 18:07:21 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 1981.326531][T31527] loop3: detected capacity change from 0 to 64 [ 1981.342160][T31526] loop1: detected capacity change from 0 to 64 18:07:21 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r10, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$rxrpc(0x21, 0x2, 0xa) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r14, @ANYBLOB="ff830500000000000000", @ANYRES32=r13], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r14, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0108000300"/18, @ANYRES32=r15], 0x44}}, 0x0) r16 = openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r16, 0xc06864b8, &(0x7f00000005c0)={r5, 0x8, 0xffffffff, 0x9, 0x3, [r17, r18, r19, r7], [0x9, 0x8, 0x0, 0xbed0], [0x20, 0x8, 0x100, 0xa], [0x81, 0x2, 0xff, 0x9]}) [ 1981.412238][T31526] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1981.474154][ T28] audit: type=1800 audit(1703095641.529:2706): pid=31526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1981.555226][ T28] audit: type=1800 audit(1703095641.529:2707): pid=31527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=6 res=0 errno=0 18:07:21 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 18:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4884}, 0x4854) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000400)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1, [@remote]}, 0x14) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71afcbc41f9922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163e0040b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbc5b3a44db1c00010000000000000049740000000200000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5001000024000b0d00faf7ffebff3f0000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001"], 0x150}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, 0x0, 0x200, 0x80000001, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0xc800) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 18:07:21 executing program 3: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x25]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x942e, 0x0) 18:07:21 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r13, @ANYBLOB="ff830500000000000000", @ANYRES32=r12], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r13, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0108000300"/18, @ANYRES32=r14], 0x44}}, 0x0) openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:21 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) 18:07:21 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0xc, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8045}, 0x80) [ 1981.782901][T31640] loop1: detected capacity change from 0 to 64 [ 1981.816670][T31640] bio_check_eod: 5 callbacks suppressed [ 1981.816682][T31640] syz-executor.1: attempt to access beyond end of device 18:07:21 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4884}, 0x4854) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000400)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1, [@remote]}, 0x14) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71afcbc41f9922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163e0040b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbc5b3a44db1c00010000000000000049740000000200000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5001000024000b0d00faf7ffebff3f0000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001"], 0x150}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, 0x0, 0x200, 0x80000001, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0xc800) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 18:07:21 executing program 5: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = open(&(0x7f0000000740)='./file2\x00', 0x80400, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) preadv(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000500)=""/38, 0x26}], 0x7, 0x6f, 0x0) readlinkat(r1, &(0x7f0000000080)='./file2\x00', &(0x7f00000001c0)=""/139, 0x8b) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000640)=@v2={0x2, @adiantum, 0x0, '\x00', @d}) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000140)='./file1\x00') r6 = openat(r5, &(0x7f0000000780)='./file2\x00', 0x420400, 0x105) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r8, &(0x7f0000000040)='./file1\x00', 0x0) r9 = syz_open_dev$mouse(&(0x7f0000000a40), 0x0, 0x40000) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r10, &(0x7f0000000040)='./file1\x00', 0x0) io_submit(0x0, 0x5, &(0x7f0000000c40)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x7fff, r7, &(0x7f00000007c0)="293f1a59ce78177e30f041345c4ebd", 0xf, 0x7, 0x0, 0x1, r4}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000000840)="5615360d751246d7d980fc9b4b86cbdc8851cf24550568752f9af09750f24820aba1afdd28d743627434449e41d3d908c98b16e545d43a2bdb720eba324f65701137eda86049351d45c65a9b44293d572e5be1313bcbedb1159dbffa36133fd551134f042432d94cef10dbf877e25ead3c50928ef57684f8d89573f43dee1b987ce613d7baa34f061fa626a19ca9429207b04fd16584c7f6fae83b3e8900c1d95fe39220ea82f32ed30e6d3d612c8cbef1cb71052844ddbf3d3d2cc58cc575c1ab9eb0594cdc7b36b6510d02b3960da8ea9b95", 0xd3, 0x5, 0x0, 0x2, r6}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000000980)="0abe9551556fad236b00b278d896477549e568f7c87d722f2e130ecf42d4b3361fbbf575d135634f44719aecd7886dcaf043eeb9ade6e5d772146a93f69a6e9a56aba4087389b35d2945b6682c1372c697c18ca001da8782806ed7cc0318d3", 0x5f, 0x4, 0x0, 0x2, r8}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x5, 0x5, r9, &(0x7f0000000a80)="5108e42e1e154eceeb7657f89396378c2ecf9eadc9a8a661fe35875d3df20a30cc2c451343fb77095157e1a227cf18c6e2b5a97bf6c24746f9919ddfcd32ab8db75c3e960a40cf4cca526d35021df617b5a678c541e5d7de7944a58c9352bf8e634016906f0efd0a6115388d6ca11f840d7854d0b53bb12de2ca448fd7faae7356098074912e858f7586d7192357eefba5d0368fc123e85898431ee2b8f02b1e82d8df94f4f23a5aea8b3463a710f562418721a5d98d9a16786d5bdf6ef50e62064b56aabbe2b8c09fdd5641794aee581b12", 0xd2, 0x2, 0x0, 0x1, r2}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x6, 0xcc, r5, &(0x7f0000000bc0)="a3a330aa1c7bc74fbcea9f05874c07bd8df42ea4f9", 0x15, 0x401, 0x0, 0x2, r10}]) [ 1981.816682][T31640] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:21 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r13, @ANYBLOB="ff830500000000000000", @ANYRES32=r12], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r13, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0108000300"/18, @ANYRES32=r14], 0x44}}, 0x0) openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1981.916182][T31640] syz-executor.1: attempt to access beyond end of device [ 1981.916182][T31640] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1981.972020][T31652] loop5: detected capacity change from 0 to 64 [ 1981.994961][ T28] audit: type=1800 audit(1703095642.049:2708): pid=31640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:22 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r13, @ANYBLOB="ff830500000000000000", @ANYRES32=r12], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r13, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0108000300"/18, @ANYRES32=r14], 0x44}}, 0x0) openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:22 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4884}, 0x4854) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000400)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1, [@remote]}, 0x14) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71afcbc41f9922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163e0040b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1bbc5b3a44db1c00010000000000000049740000000200000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5001000024000b0d00faf7ffebff3f0000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001"], 0x150}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, 0x0, 0x200, 0x80000001, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0xc800) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 18:07:22 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0xc, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8045}, 0x80) [ 1982.124183][T31652] syz-executor.5: attempt to access beyond end of device [ 1982.124183][T31652] loop5: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1982.179319][T31652] syz-executor.5: attempt to access beyond end of device [ 1982.179319][T31652] loop5: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:22 executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = creat(&(0x7f0000002340)='./file0\x00', 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)) [ 1982.222059][T31758] loop1: detected capacity change from 0 to 64 [ 1982.239133][ T28] audit: type=1800 audit(1703095642.289:2709): pid=31652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.5" name="file2" dev="loop5" ino=6 res=0 errno=0 18:07:22 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0xc, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8045}, 0x80) [ 1982.490427][T31863] loop1: detected capacity change from 0 to 64 [ 1982.900469][T31641] loop3: detected capacity change from 0 to 32768 [ 1982.917163][T31641] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (31641) [ 1982.936503][T31641] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1982.950907][T31641] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1982.959804][T31641] BTRFS info (device loop3): enabling auto defrag [ 1982.966437][T31641] BTRFS info (device loop3): enabling disk space caching [ 1982.973682][T31641] BTRFS info (device loop3): max_inline at 0 [ 1982.983937][T31641] BTRFS info (device loop3): force clearing of disk cache [ 1982.992582][T31641] BTRFS info (device loop3): turning on sync discard [ 1983.003678][T31641] BTRFS info (device loop3): disk space caching is enabled [ 1983.040373][T31641] BTRFS info (device loop3): enabling ssd optimizations [ 1983.048314][T31641] BTRFS info (device loop3): rebuilding free space tree [ 1983.068349][T31641] BTRFS info (device loop3): disabling free space tree [ 1983.075291][T31641] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1983.086043][T31641] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) 18:07:23 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x48) 18:07:23 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r13, @ANYBLOB="ff830500000000000000", @ANYRES32=r12], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r13, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0108000300"/18, @ANYRES32=r14], 0x44}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:23 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r13, @ANYBLOB="ff830500000000000000", @ANYRES32=r12], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r13, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0108000300"/18, @ANYRES32=r14], 0x44}}, 0x0) openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:23 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) 18:07:23 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x18d, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000440)={[0x2]}, 0x8, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x8, 0x5, {0x57, 0x4, 0x327e, {0x6f1c}, {0x4, 0x1000}, @period={0x5c, 0x6, 0x1, 0x400, 0x1000, {0x9, 0x9, 0x3, 0x6000}, 0x7, &(0x7f0000000100)=[0x7fff, 0x0, 0x101, 0x92, 0x401, 0x7, 0x8d7]}}, {0x53, 0x5, 0x7, {0x5, 0x2}, {0xf348, 0x3}, @const={0x3, {0x9, 0x8001, 0x81, 0x80}}}}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xcb) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000480)="bbfa03d351ed4229117d425fb2444558411a71e0b5d600d0343fd7fd50cf1389901ae3a1074fb7a8315c4cd44f60e5115317d5a41aaffeace038e6b458d5c99a893cefd140836eb96017c4f84f2b718d42713eac775e0f862560ec84b25532de33d133c6c471") openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x474e80, 0x0) lseek(r2, 0xfffffffffffff290, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @aes128, 0x8, @desc1}) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000380)={0x0, 0x6}) 18:07:23 executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") r0 = creat(&(0x7f0000002340)='./file0\x00', 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)) [ 1983.156230][T31979] udevd[31979]: open /dev/null failed: No such file or directory [ 1983.207291][ T42] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1983.228351][T31986] loop1: detected capacity change from 0 to 64 [ 1983.252057][ T5102] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1983.256970][T31986] syz-executor.1: attempt to access beyond end of device [ 1983.256970][T31986] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:23 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$rxrpc(0x21, 0x2, 0xa) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r12, @ANYBLOB="ff830500000000000000", @ANYRES32=r11], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1983.337370][T31986] buffer_io_error: 7 callbacks suppressed [ 1983.337383][T31986] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1983.383153][T31986] syz-executor.1: attempt to access beyond end of device [ 1983.383153][T31986] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1983.476696][T31986] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:23 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$rxrpc(0x21, 0x2, 0xa) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000000000000", @ANYRES32=r10], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r11, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1983.536608][ T28] audit: type=1800 audit(1703095643.589:2710): pid=31986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:23 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r13, @ANYBLOB="ff830500000000000000", @ANYRES32=r12], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r13, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0108000300"/18, @ANYRES32=r14], 0x44}}, 0x0) openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:23 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x48) 18:07:23 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x18d, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000440)={[0x2]}, 0x8, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x8, 0x5, {0x57, 0x4, 0x327e, {0x6f1c}, {0x4, 0x1000}, @period={0x5c, 0x6, 0x1, 0x400, 0x1000, {0x9, 0x9, 0x3, 0x6000}, 0x7, &(0x7f0000000100)=[0x7fff, 0x0, 0x101, 0x92, 0x401, 0x7, 0x8d7]}}, {0x53, 0x5, 0x7, {0x5, 0x2}, {0xf348, 0x3}, @const={0x3, {0x9, 0x8001, 0x81, 0x80}}}}) (async) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x8, 0x5, {0x57, 0x4, 0x327e, {0x6f1c}, {0x4, 0x1000}, @period={0x5c, 0x6, 0x1, 0x400, 0x1000, {0x9, 0x9, 0x3, 0x6000}, 0x7, &(0x7f0000000100)=[0x7fff, 0x0, 0x101, 0x92, 0x401, 0x7, 0x8d7]}}, {0x53, 0x5, 0x7, {0x5, 0x2}, {0xf348, 0x3}, @const={0x3, {0x9, 0x8001, 0x81, 0x80}}}}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xcb) (async) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xcb) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) (async) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000480)="bbfa03d351ed4229117d425fb2444558411a71e0b5d600d0343fd7fd50cf1389901ae3a1074fb7a8315c4cd44f60e5115317d5a41aaffeace038e6b458d5c99a893cefd140836eb96017c4f84f2b718d42713eac775e0f862560ec84b25532de33d133c6c471") openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x474e80, 0x0) lseek(r2, 0xfffffffffffff290, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @aes128, 0x8, @desc1}) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @aes128, 0x8, @desc1}) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000380)={0x0, 0x6}) [ 1983.757090][T32103] loop3: detected capacity change from 0 to 64 18:07:23 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$rxrpc(0x21, 0x2, 0xa) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000000000000", @ANYRES32=r10], 0x4}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1983.862039][T32105] loop1: detected capacity change from 0 to 64 [ 1983.927339][T32103] syz-executor.3: attempt to access beyond end of device [ 1983.927339][T32103] loop3: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1983.955657][T32105] syz-executor.1: attempt to access beyond end of device [ 1983.955657][T32105] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1983.996634][T32103] Buffer I/O error on dev loop3, logical block 1037, async page read [ 1984.021782][T32105] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1984.053962][T32103] syz-executor.3: attempt to access beyond end of device [ 1984.053962][T32103] loop3: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1984.088649][T32105] syz-executor.1: attempt to access beyond end of device [ 1984.088649][T32105] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1984.148707][T32105] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1984.191780][T32103] Buffer I/O error on dev loop3, logical block 1037, async page read [ 1984.238665][ T28] audit: type=1800 audit(1703095644.259:2711): pid=32105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1984.327408][ T28] audit: type=1800 audit(1703095644.389:2712): pid=32103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=6 res=0 errno=0 18:07:24 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r13, @ANYBLOB="ff830500000000000000", @ANYRES32=r12], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r13, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0108000300"/18, @ANYRES32=r14], 0x44}}, 0x0) openat$cgroup_ro(r2, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:24 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:24 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x20000023896) 18:07:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:24 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x18d, &(0x7f0000000180)="$eJzs289KMlEYx/HnjP993xdeslpECyGINjlqYLXKLqCLEJtE0pBsowTppbTvBrqULiGoRbtWGTPMjM2MJUbNoH4/G88zP2bmnMU5PAoKgKVVlbwoUZI0i830/5ucinpKAEIysj/fRgCWT+x11hvMYwPA/Hs+FumIyNPLdV1iyUB/YOZVJ9dSwXwoshG3c5WWjL+/uBXZloydZyfen3Wer/5MzHe2nPf/lX9xJ1mRnJ2fuvevT+l2TqbkAAAsByWFj+WdiBRkML6gyVmzZRTdOmHVJbdOWnXZV++5dcqqC3Ut+Oqjn1wHgNlpnv3/8Hif8OYx3/6P+/Y/gPnV7fXPa62Wcfn5wPzSPzEa2sdAIFIDkS8euMiDfOgvVVEvmcECDDIi4r0S9ckE4LfpV+2O3u31d5vtWsNoGBeVcqVyWDzYL+lW469723+T/yd+AHNq3AZEPRMAAAAAAAAAAAAAAPBdq7IW9RQAAAAAhCSMPxhFvUYAAAAAAAAAAAAAAAAAABbNewAAAP//g7UXaQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000440)={[0x2]}, 0x8, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x8, 0x5, {0x57, 0x4, 0x327e, {0x6f1c}, {0x4, 0x1000}, @period={0x5c, 0x6, 0x1, 0x400, 0x1000, {0x9, 0x9, 0x3, 0x6000}, 0x7, &(0x7f0000000100)=[0x7fff, 0x0, 0x101, 0x92, 0x401, 0x7, 0x8d7]}}, {0x53, 0x5, 0x7, {0x5, 0x2}, {0xf348, 0x3}, @const={0x3, {0x9, 0x8001, 0x81, 0x80}}}}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xcb) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000480)="bbfa03d351ed4229117d425fb2444558411a71e0b5d600d0343fd7fd50cf1389901ae3a1074fb7a8315c4cd44f60e5115317d5a41aaffeace038e6b458d5c99a893cefd140836eb96017c4f84f2b718d42713eac775e0f862560ec84b25532de33d133c6c471") openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x474e80, 0x0) lseek(r2, 0xfffffffffffff290, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @aes128, 0x8, @desc1}) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000380)={0x0, 0x6}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x18d, &(0x7f0000000180)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) signalfd4(r0, &(0x7f0000000440)={[0x2]}, 0x8, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x8, 0x5, {0x57, 0x4, 0x327e, {0x6f1c}, {0x4, 0x1000}, @period={0x5c, 0x6, 0x1, 0x400, 0x1000, {0x9, 0x9, 0x3, 0x6000}, 0x7, &(0x7f0000000100)=[0x7fff, 0x0, 0x101, 0x92, 0x401, 0x7, 0x8d7]}}, {0x53, 0x5, 0x7, {0x5, 0x2}, {0xf348, 0x3}, @const={0x3, {0x9, 0x8001, 0x81, 0x80}}}}) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) (async) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xcb) (async) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) (async) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) (async) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000480)="bbfa03d351ed4229117d425fb2444558411a71e0b5d600d0343fd7fd50cf1389901ae3a1074fb7a8315c4cd44f60e5115317d5a41aaffeace038e6b458d5c99a893cefd140836eb96017c4f84f2b718d42713eac775e0f862560ec84b25532de33d133c6c471") (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x474e80, 0x0) (async) lseek(r2, 0xfffffffffffff290, 0x2) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @aes128, 0x8, @desc1}) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000380)={0x0, 0x6}) (async) 18:07:24 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x1e) 18:07:24 executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = creat(&(0x7f0000002340)='./file0\x00', 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)) 18:07:24 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r13, @ANYBLOB="ff830500000000000000", @ANYRES32=r12], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r13, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0108000300"/18, @ANYRES32=r14], 0x44}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1984.784648][T32228] loop3: detected capacity change from 0 to 64 [ 1984.822376][T32233] loop1: detected capacity change from 0 to 64 [ 1984.871322][T32228] Buffer I/O error on dev loop3, logical block 1037, async page read [ 1984.916262][T32233] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1984.929245][T32228] Buffer I/O error on dev loop3, logical block 1037, async page read 18:07:25 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$rxrpc(0x21, 0x2, 0xa) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r12, @ANYBLOB="ff830500000000000000", @ANYRES32=r11], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1984.964772][T32233] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) [ 1985.000948][ T28] audit: type=1800 audit(1703095645.039:2713): pid=32228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=6 res=0 errno=0 18:07:25 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1985.080866][ T28] audit: type=1800 audit(1703095645.039:2714): pid=32233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:25 executing program 1: ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000040)={0x3, 0x1, 0x1000, &(0x7f0000000740)=""/4096}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001740)={{r1}, "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"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:25 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x20000023896) 18:07:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:25 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x11) [ 1985.316687][T32347] loop1: detected capacity change from 0 to 64 [ 1985.343912][T32347] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1985.350424][ T28] audit: type=1800 audit(1703095645.409:2715): pid=32347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:25 executing program 1: ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000040)={0x3, 0x1, 0x1000, &(0x7f0000000740)=""/4096}) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001740)={{r1}, "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"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) [ 1985.453529][T32357] loop3: detected capacity change from 0 to 64 [ 1985.583645][ T28] audit: type=1800 audit(1703095645.639:2716): pid=32357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=6 res=0 errno=0 18:07:25 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x441, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x60) getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000679b1607e44cdb30e582db7b18", @ANYRES16=r1, @ANYBLOB="050000000002000000002e000848a6b1d400", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) 18:07:25 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$rxrpc(0x21, 0x2, 0xa) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000000000000", @ANYRES32=r10], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r11, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:25 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x20000023896) 18:07:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:25 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x10) 18:07:25 executing program 1: ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000040)={0x3, 0x1, 0x1000, &(0x7f0000000740)=""/4096}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001740)={{r1}, "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"}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:26 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) [ 1985.957157][T32465] loop1: detected capacity change from 0 to 64 [ 1985.963788][T32472] loop3: detected capacity change from 0 to 64 18:07:26 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$rxrpc(0x21, 0x2, 0xa) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000000000000", @ANYRES32=r10], 0x4}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1986.043944][ T28] audit: type=1800 audit(1703095646.099:2717): pid=32472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=6 res=0 errno=0 18:07:26 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)) 18:07:26 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x4, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0d5495d", @ANYRES16=r1, @ANYBLOB="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"], 0x160}}, 0x1) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0xffffffffffffffff, 0xffffffe1}) fcntl$getown(r0, 0x9) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x40) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$binfmt_script(r2, &(0x7f0000000740)={'#! ', './file1', [{0x20, 'minix\x00'}, {0x20, '\\!}%-%/'}, {0x20, '@#+-@}\'.'}, {0x20, '/dev/audio#\x00'}, {0x20, '-%&#.#,\xc9'}, {}, {0x20, '{{%'}], 0xa, "79e67cb2c5142ea63b5a84a96eae487efa8d19882a35ffbaec025691b85bf22de5c13c8fb68e83f251514967bbae12c835d9efa41449f737b5e1e3c2a30f44f553e4eded6cbfde0d14ca3e97779e3d43cfe6dd416f75a383369be0a86ebba620e2c17c92e04066f99b32ce9ed8c23464f5f725deee9734f7b7c57dd3734d021f0e4cceff6119d29b6233292d8fa250997dffd59425ab28e9c694d88265a4eb7aa3743d4f6c70c1184f127cd57a0f78bdd59541b6416596c799d1be45d154f60228237e6ca69cc6063c263e4dd30bc21ffe4800"}, 0x111) 18:07:26 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@smackfsroot={'smackfsroot', 0x3d, '$@$+/!'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) creat(&(0x7f0000000100)='./file0\x00', 0x1e0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 18:07:26 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x20000023896) 18:07:26 executing program 1: syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x2000004, &(0x7f0000000040)=ANY=[], 0x1, 0x196, &(0x7f00000001c0)="$eJzs289O4lAUx/FzWyh/ZiaZDMwsJrOYZJLJbIYCJqg7fAAfgmAlRDBE3EBMlEfxMXwUH8FEF+6MCzFt2moLgjaBQvl+Nt7Tn7e9TbjNgaQCYGPV5bcoUWLYxa/s1/OCintJAJZk7P59Gs+i2/8JIHH0h49O4GEAJMPdnkhPRG7vz5qiGxP9gZ3XvVzLTOYjkZ8pN1dZyYX7i0uRv5Jz8/zU+Xnv/OrT1PzfH+/6n+VLyku+ScHND/z5P+Z0O/tzcgAANoOSUrgOHNDksN2xyn6dduqKXxtOXQ3VW36dcepSU1vUDQCITAvs/+ubq3Qw10P7PxXa/wDWV38wPGp0OtbJ2wP7S//UaOQ+BiYidSEy44SrMSiuxjIiDeTVEbUC62GwkMHj8q6VE5HQZwxAwpmn3Z7ZHwz/t7uNltWyjmvVWm23vLNdMZ3G3wy2/7bwT/wA1tRLGxD3SgAAAAAAAAAAAAAAQFRF+R73EgAAAAAsyfvfEDIiv9IX9z0CAAAAAAAAAAAAAAAAAJA0zwEAAP//KGYRjA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x7, './file2', './file2'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002c00)="9da7f84ffafb415135d4ae9e1bd25cc15d4d6d63f8c8b814616114c4a6d9006a58e773f6e0d4f3bbfbb7764be99e05e576dee926854268c583ed4f709ba6e30f8f01560a26cf9f0957a08ebbace814735ad79349f17374202cfc1af428f4b62f93d1bd05a619638c9083e7ffe11badb60d5001cedab4a74c512950e64fe606d228431287cd879521089e145541b608c82ed1dd", 0x93}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x1}}], 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000001600)=@md0, 0x0, &(0x7f0000002940)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x3, r6, 0x6000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x4000000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000002cc0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r7, 0x1) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) r10 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002c00)="9da7f84ffafb415135d4ae9e1bd25cc15d4d6d63f8c8b814616114c4a6d9006a58e773f6e0d4f3bbfbb7764be99e05e576dee926854268c583ed4f709ba6e30f8f01560a26cf9f0957a08ebbace814735ad79349f17374202cfc1af428f4b62f93d1bd05a619638c9083e7ffe11badb60d5001cedab4a74c512950e64fe606d228431287cd879521089e145541b608c82ed1dd", 0x93}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r5, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r7]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r10, r7, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0xb0, 0x1}}], 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000001600)=@md0, r9, &(0x7f0000002940)='./file0\x00') syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./file2\x00', 0x8440, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xb66a}}, {@max_read={'max_read', 0x3d, 0x58f5}}, {@default_permissions}], [{@uid_gt}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x61, 0x34, 0x36, 0x31, 0x32, 0x33, 0x37], 0x2d, [0x0, 0x31, 0xf, 0x66], 0x2d, [0x37, 0x35, 0x62, 0x30], 0x2d, [0x30, 0x35, 0x33, 0x31], 0x2d, [0x62, 0x65, 0x5b286902882ea34b, 0x37, 0x63, 0x33, 0x36, 0x65]}}}, {@obj_user={'obj_user', 0x3d, 'minix\x00'}}, {@uid_eq={'uid', 0x3d, r9}}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f00000005c0)="3723f80a315483a2cd0c984886d15be3f18146ba8276a864b3bd133efd6259e25d2670cfdf5ba407974f557517c15e624f4e4f8c52520a65ce2ced44bb1d5fe2331190cbe48bb57a007f456465e54c165916797fc5558c74f5cb807a6383de1fe6b6ef777d71873bfbef98fb54e9c09363746b0a9394e1c345caab7ecc23c270dbf42f1a4755a28a22cbeaa01d610928c7fdc4e80c33fce885de4a88a00c1efcbc4f5e86b060b9f2e4ab1ce255020129313a92063ee0c87e2799919495e4100134d52dc3cf6196e1604589bddcd59543505b91501232edefc769effe5a11e2488b5fc05e0ce7b10447f06dc39b53e6e4") 18:07:26 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)) 18:07:26 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1986.266383][T32586] loop3: detected capacity change from 0 to 64 [ 1986.326041][ T28] audit: type=1804 audit(1703095646.379:2718): pid=32581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1575063456/syzkaller.vmCoUb/4532/file1" dev="sda1" ino=2032 res=1 errno=0 18:07:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x2}) [ 1986.390849][T32586] fuse: Bad value for 'user_id' 18:07:26 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)) 18:07:26 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1986.425585][T32592] loop1: detected capacity change from 0 to 64 18:07:26 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x2}) 18:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x400000000000000, 0x0) 18:07:26 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 1986.511311][ T28] audit: type=1800 audit(1703095646.569:2719): pid=32592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:26 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x20000023896) 18:07:26 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x68000000, 0x0) 18:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x400000000000000, 0x0) [ 1986.727040][T32634] loop3: detected capacity change from 0 to 64 18:07:26 executing program 1: syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x2000004, &(0x7f0000000040)=ANY=[], 0x1, 0x196, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) (async) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x7, './file2', './file2'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) (async) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002c00)="9da7f84ffafb415135d4ae9e1bd25cc15d4d6d63f8c8b814616114c4a6d9006a58e773f6e0d4f3bbfbb7764be99e05e576dee926854268c583ed4f709ba6e30f8f01560a26cf9f0957a08ebbace814735ad79349f17374202cfc1af428f4b62f93d1bd05a619638c9083e7ffe11badb60d5001cedab4a74c512950e64fe606d228431287cd879521089e145541b608c82ed1dd", 0x93}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x1}}], 0x2, 0x0) (async) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000001600)=@md0, 0x0, &(0x7f0000002940)='./file0\x00') (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) ioprio_set$pid(0x3, r6, 0x6000) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x4000000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async) r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000002cc0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) (async) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r7, 0x1) (async) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) (async) r10 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002c00)="9da7f84ffafb415135d4ae9e1bd25cc15d4d6d63f8c8b814616114c4a6d9006a58e773f6e0d4f3bbfbb7764be99e05e576dee926854268c583ed4f709ba6e30f8f01560a26cf9f0957a08ebbace814735ad79349f17374202cfc1af428f4b62f93d1bd05a619638c9083e7ffe11badb60d5001cedab4a74c512950e64fe606d228431287cd879521089e145541b608c82ed1dd", 0x93}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r5, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r7]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r10, r7, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0xb0, 0x1}}], 0x2, 0x0) (async) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000001600)=@md0, r9, &(0x7f0000002940)='./file0\x00') (async) syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./file2\x00', 0x8440, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xb66a}}, {@max_read={'max_read', 0x3d, 0x58f5}}, {@default_permissions}], [{@uid_gt}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x61, 0x34, 0x36, 0x31, 0x32, 0x33, 0x37], 0x2d, [0x0, 0x31, 0xf, 0x66], 0x2d, [0x37, 0x35, 0x62, 0x30], 0x2d, [0x30, 0x35, 0x33, 0x31], 0x2d, [0x62, 0x65, 0x5b286902882ea34b, 0x37, 0x63, 0x33, 0x36, 0x65]}}}, {@obj_user={'obj_user', 0x3d, 'minix\x00'}}, {@uid_eq={'uid', 0x3d, r9}}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f00000005c0)="3723f80a315483a2cd0c984886d15be3f18146ba8276a864b3bd133efd6259e25d2670cfdf5ba407974f557517c15e624f4e4f8c52520a65ce2ced44bb1d5fe2331190cbe48bb57a007f456465e54c165916797fc5558c74f5cb807a6383de1fe6b6ef777d71873bfbef98fb54e9c09363746b0a9394e1c345caab7ecc23c270dbf42f1a4755a28a22cbeaa01d610928c7fdc4e80c33fce885de4a88a00c1efcbc4f5e86b060b9f2e4ab1ce255020129313a92063ee0c87e2799919495e4100134d52dc3cf6196e1604589bddcd59543505b91501232edefc769effe5a11e2488b5fc05e0ce7b10447f06dc39b53e6e4") 18:07:26 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:26 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x400000000000000, 0x0) 18:07:26 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:26 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x20000023896) [ 1986.839824][T32634] bio_check_eod: 12 callbacks suppressed [ 1986.839838][T32634] syz-executor.3: attempt to access beyond end of device [ 1986.839838][T32634] loop3: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1986.883694][T32634] syz-executor.3: attempt to access beyond end of device [ 1986.883694][T32634] loop3: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:27 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x48000000, 0x0) 18:07:27 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) 18:07:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2], 0x44}}, 0x60000000) [ 1986.996913][T32720] loop1: detected capacity change from 0 to 64 18:07:27 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 1987.100969][T32741] loop3: detected capacity change from 0 to 64 [ 1987.132204][T32752] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 18:07:27 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) [ 1987.147056][T32741] syz-executor.3: attempt to access beyond end of device [ 1987.147056][T32741] loop3: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2], 0x44}}, 0x60000000) 18:07:27 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r2) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000880)={r6, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000280)={r0, 0x2, 0x20, 0x84f, 0x1, [0x0, 0x0, 0x0, r6], [0x1, 0x0, 0x7, 0x6], [0xffffffff, 0x101, 0x0, 0xffffffff], [0xb3e7, 0x3, 0x40, 0x8]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r7}) [ 1987.238146][T32741] syz-executor.3: attempt to access beyond end of device [ 1987.238146][T32741] loop3: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:27 executing program 1: syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x2000004, &(0x7f0000000040)=ANY=[], 0x1, 0x196, &(0x7f00000001c0)="$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") (async) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x2000004, &(0x7f0000000040)=ANY=[], 0x1, 0x196, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x7, './file2', './file2'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002c00)="9da7f84ffafb415135d4ae9e1bd25cc15d4d6d63f8c8b814616114c4a6d9006a58e773f6e0d4f3bbfbb7764be99e05e576dee926854268c583ed4f709ba6e30f8f01560a26cf9f0957a08ebbace814735ad79349f17374202cfc1af428f4b62f93d1bd05a619638c9083e7ffe11badb60d5001cedab4a74c512950e64fe606d228431287cd879521089e145541b608c82ed1dd", 0x93}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x1}}], 0x2, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002c00)="9da7f84ffafb415135d4ae9e1bd25cc15d4d6d63f8c8b814616114c4a6d9006a58e773f6e0d4f3bbfbb7764be99e05e576dee926854268c583ed4f709ba6e30f8f01560a26cf9f0957a08ebbace814735ad79349f17374202cfc1af428f4b62f93d1bd05a619638c9083e7ffe11badb60d5001cedab4a74c512950e64fe606d228431287cd879521089e145541b608c82ed1dd", 0x93}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x1}}], 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000001600)=@md0, 0x0, &(0x7f0000002940)='./file0\x00') (async) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000001600)=@md0, 0x0, &(0x7f0000002940)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x3, r6, 0x6000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x4000000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x4000000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000002cc0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r7, 0x1) (async) shutdown(r7, 0x1) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) r10 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)}}, {{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002c00)="9da7f84ffafb415135d4ae9e1bd25cc15d4d6d63f8c8b814616114c4a6d9006a58e773f6e0d4f3bbfbb7764be99e05e576dee926854268c583ed4f709ba6e30f8f01560a26cf9f0957a08ebbace814735ad79349f17374202cfc1af428f4b62f93d1bd05a619638c9083e7ffe11badb60d5001cedab4a74c512950e64fe606d228431287cd879521089e145541b608c82ed1dd", 0x93}], 0x1, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r5, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r7]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r10, r7, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0xb0, 0x1}}], 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000001600)=@md0, r9, &(0x7f0000002940)='./file0\x00') syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./file2\x00', 0x8440, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xb66a}}, {@max_read={'max_read', 0x3d, 0x58f5}}, {@default_permissions}], [{@uid_gt}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x61, 0x34, 0x36, 0x31, 0x32, 0x33, 0x37], 0x2d, [0x0, 0x31, 0xf, 0x66], 0x2d, [0x37, 0x35, 0x62, 0x30], 0x2d, [0x30, 0x35, 0x33, 0x31], 0x2d, [0x62, 0x65, 0x5b286902882ea34b, 0x37, 0x63, 0x33, 0x36, 0x65]}}}, {@obj_user={'obj_user', 0x3d, 'minix\x00'}}, {@uid_eq={'uid', 0x3d, r9}}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f00000005c0)="3723f80a315483a2cd0c984886d15be3f18146ba8276a864b3bd133efd6259e25d2670cfdf5ba407974f557517c15e624f4e4f8c52520a65ce2ced44bb1d5fe2331190cbe48bb57a007f456465e54c165916797fc5558c74f5cb807a6383de1fe6b6ef777d71873bfbef98fb54e9c09363746b0a9394e1c345caab7ecc23c270dbf42f1a4755a28a22cbeaa01d610928c7fdc4e80c33fce885de4a88a00c1efcbc4f5e86b060b9f2e4ab1ce255020129313a92063ee0c87e2799919495e4100134d52dc3cf6196e1604589bddcd59543505b91501232edefc769effe5a11e2488b5fc05e0ce7b10447f06dc39b53e6e4") 18:07:27 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) getdents64(r1, &(0x7f00000001c0)=""/188, 0xbc) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x8, 0x34424752, 0x3f, 0x401, 0x2, @discrete={0xfffffffa, 0x3}}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') [ 1987.280051][ T364] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 18:07:27 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000140)=0x5) 18:07:27 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:27 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 1987.417994][ T373] loop1: detected capacity change from 0 to 64 18:07:27 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x28}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) getdents64(r1, &(0x7f00000001c0)=""/188, 0xbc) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x8, 0x34424752, 0x3f, 0x401, 0x2, @discrete={0xfffffffa, 0x3}}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 18:07:27 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=@known='com.apple.system.Security\x00') r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) openat(r8, &(0x7f0000000340)='./file0\x00', 0x300, 0x60) dup3(r7, 0xffffffffffffffff, 0x0) [ 1987.658493][ T504] loop3: detected capacity change from 0 to 64 18:07:27 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:27 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0x106000, 0xc5, &(0x7f0000000040)=""/197}, {0x1b004, 0x97, &(0x7f00000001c0)=""/151}, {0x201000, 0x48, &(0x7f0000000280)=""/72}, {0x100000, 0x34, &(0x7f0000000300)=""/52}, {0x0, 0xa1, &(0x7f0000000340)=""/161}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) 18:07:27 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) getdents64(r1, &(0x7f00000001c0)=""/188, 0xbc) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x8, 0x34424752, 0x3f, 0x401, 0x2, @discrete={0xfffffffa, 0x3}}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 18:07:27 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:27 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=@known='com.apple.system.Security\x00') r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) openat(r8, &(0x7f0000000340)='./file0\x00', 0x300, 0x60) dup3(r7, 0xffffffffffffffff, 0x0) 18:07:28 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) [ 1987.938232][ T515] loop1: detected capacity change from 0 to 64 [ 1987.951021][ T516] loop3: detected capacity change from 0 to 64 18:07:28 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1987.997099][ T515] syz-executor.1: attempt to access beyond end of device [ 1987.997099][ T515] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:28 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=@known='com.apple.system.Security\x00') r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) openat(r8, &(0x7f0000000340)='./file0\x00', 0x300, 0x60) dup3(r7, 0xffffffffffffffff, 0x0) 18:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1f00, 0x0) 18:07:28 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1988.044489][ T515] syz-executor.1: attempt to access beyond end of device [ 1988.044489][ T515] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:28 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1f00, 0x0) [ 1988.163772][ T544] loop3: detected capacity change from 0 to 64 18:07:28 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0x106000, 0xc5, &(0x7f0000000040)=""/197}, {0x1b004, 0x97, &(0x7f00000001c0)=""/151}, {0x201000, 0x48, &(0x7f0000000280)=""/72}, {0x100000, 0x34, &(0x7f0000000300)=""/52}, {0x0, 0xa1, &(0x7f0000000340)=""/161}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) (async, rerun: 32) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) (rerun: 32) 18:07:28 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)) 18:07:28 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1988.306287][ T656] loop1: detected capacity change from 0 to 64 18:07:28 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=@known='com.apple.system.Security\x00') r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) openat(r7, &(0x7f0000000340)='./file0\x00', 0x300, 0x60) 18:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1f00, 0x0) 18:07:28 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)) 18:07:28 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:28 executing program 2: ioperm(0xfc03, 0x0, 0x0) ioperm(0x0, 0x7, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:28 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0x106000, 0xc5, &(0x7f0000000040)=""/197}, {0x1b004, 0x97, &(0x7f00000001c0)=""/151}, {0x201000, 0x48, &(0x7f0000000280)=""/72}, {0x100000, 0x34, &(0x7f0000000300)=""/52}, {0x0, 0xa1, &(0x7f0000000340)=""/161}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) (async) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) 18:07:28 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:28 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)) 18:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xf00, 0x0) [ 1988.698538][ T786] loop3: detected capacity change from 0 to 64 [ 1988.731931][ T793] loop1: detected capacity change from 0 to 64 18:07:28 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=@known='com.apple.system.Security\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) [ 1988.808059][ T793] syz-executor.1: attempt to access beyond end of device [ 1988.808059][ T793] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:28 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:28 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:28 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xf00, 0x0) [ 1988.901075][ T793] buffer_io_error: 14 callbacks suppressed [ 1988.901087][ T793] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1988.916898][ T824] loop3: detected capacity change from 0 to 64 18:07:29 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:29 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:29 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=@known='com.apple.system.Security\x00') [ 1988.955251][ T793] syz-executor.1: attempt to access beyond end of device [ 1988.955251][ T793] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1989.104940][ T793] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1989.132824][ T952] loop3: detected capacity change from 0 to 64 [ 1989.145293][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1989.145304][ T28] audit: type=1800 audit(1703095649.199:2723): pid=793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1989.171387][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:29 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xf00, 0x0) 18:07:29 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:29 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:29 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000004, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0e312a77da1ba9d566f79ad7553d8df859a7e7b8ca4bd77566f486adb9aa61d0f46dd21218da4fb75d7442859af0b1ecad894d8e905f0196df5f1beb351999fc5fb8c5931070f7da056e28af6195a1ced72409f584a948532812583d2090cb33e3b16d2a46a659e2522d0813a54358494508a2c4647e6403a8315e6aca275f132cea1432a9f7583e833ac92aac60e221dacc86a93fc19b0533294b4a9bd2f6e5ea", @ANYRES8=r0, @ANYRESHEX=r2, @ANYRESOCT=0x0], 0x0, 0x19e, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:29 executing program 2: ioperm(0xfc03, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:29 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:29 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:29 executing program 0: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=@known='com.apple.system.Security\x00') [ 1989.431472][ T956] loop3: detected capacity change from 0 to 64 18:07:29 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 1989.481252][ T965] loop1: detected capacity change from 0 to 64 18:07:29 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:29 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 32) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 32) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000004, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0e312a77da1ba9d566f79ad7553d8df859a7e7b8ca4bd77566f486adb9aa61d0f46dd21218da4fb75d7442859af0b1ecad894d8e905f0196df5f1beb351999fc5fb8c5931070f7da056e28af6195a1ced72409f584a948532812583d2090cb33e3b16d2a46a659e2522d0813a54358494508a2c4647e6403a8315e6aca275f132cea1432a9f7583e833ac92aac60e221dacc86a93fc19b0533294b4a9bd2f6e5ea", @ANYRES8=r0, @ANYRESHEX=r2, @ANYRESOCT=0x0], 0x0, 0x19e, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:29 executing program 0: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=@known='com.apple.system.Security\x00') 18:07:29 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:29 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 1989.692411][ T983] loop3: detected capacity change from 0 to 64 18:07:29 executing program 0: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000003280)='./file1\x00', 0x80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) fremovexattr(0xffffffffffffffff, &(0x7f0000000800)=@known='com.apple.system.Security\x00') 18:07:29 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) [ 1989.926393][ T1106] loop3: detected capacity change from 0 to 64 18:07:30 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 64) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 32) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000004, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0e312a77da1ba9d566f79ad7553d8df859a7e7b8ca4bd77566f486adb9aa61d0f46dd21218da4fb75d7442859af0b1ecad894d8e905f0196df5f1beb351999fc5fb8c5931070f7da056e28af6195a1ced72409f584a948532812583d2090cb33e3b16d2a46a659e2522d0813a54358494508a2c4647e6403a8315e6aca275f132cea1432a9f7583e833ac92aac60e221dacc86a93fc19b0533294b4a9bd2f6e5ea", @ANYRES8=r0, @ANYRESHEX=r2, @ANYRESOCT=0x0], 0x0, 0x19e, &(0x7f0000000440)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:30 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:30 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:30 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000095, &(0x7f00000001c0)=ANY=[@ANYBLOB="8bf0d6f68fb543d217956b307dfffb03a690d92f86e04ec6c6841e402d8a682e8caae2eb4c55497fb8a49487f4b8736e2aa2622fa327e6c9f14d18448e1e9fa273d5c3bda36102f68b35183d5140151ac0485dffeabefd38b528ba37abf6b6d671e29716e36188cef4c6af1de63c26681e381ee59859bac7b276f0f464ab", @ANYRESDEC=0x0, @ANYBLOB="a365b19942d60e12d168728642dd4ca28326922dbbcebd73825699cca6076e3f15c355cc15db90deb200c93b3180c318409cfb4ee1c2a2a0d471c4a4b986f08ad630e3fb7433d13798a36dfb03c2636809ef9d1940a1f9de0c6aa61ef53d670a211c3c969a70f612ed1e48d29f33748ec0c3178f3878fc116df7aff2667098b7694af60553f652ae6d0efe3fc31b14c8d123e71a3ed4d282fd86dc79c25b0494ea500710cc9cd6047faacd513d9d573a930781fb858156081a140989a6e176bb9ec596dd08dc8c756a220af41f788243274f37204a212a2ba42813d3462e5a0bc139327ddebf56dab79519567c63", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="8a91e2845758b8db8bec46fc1c911555a09a17738fb8c373acd5244752534f174b71f8c70569a4755be85b40879422ca16e9c5f409587d7cc207876749d00448037805184f90387190ffbc7f89ea5c0181"], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88) 18:07:30 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000003340)=""/137, 0x89}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f00000032c0)=""/89, 0x59}, 0x1}], 0x1, 0x20, &(0x7f00000007c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:30 executing program 2: ioperm(0xfc03, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:30 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:30 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1990.200665][ T1110] loop3: detected capacity change from 0 to 64 18:07:30 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:30 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000002080)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0xfffffffe, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000290000003700000000000000000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRESDEC=r0], 0x40}}], 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000340)=""/94, &(0x7f0000000180)=0x5e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f80)={&(0x7f00000021c0)=ANY=[@ANYBLOB="3c0000001a0000032dbd7000fedbdf250a101400fe01ff060018000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="e7bf465b2d3d6a8e14c448ebd4f32efe4a012f9415803defbc97d75e086156fdab2e4d9767a63955e82bffa6a43c26c4b5937b2b4a0c6648ef3d14ffb44b4fae5c5748bf1f1e521ea0fbf8ee", @ANYRES32=r2, @ANYBLOB="0800060004000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="036bc089bfabb97b650cd325000000000000000000754848cf62f15adb5b91a6a0ee6eb6c2667674bde18b9146b6fe34e50178bdacd4b54ab61ef0c487d55497c164687eb03a8d60fbaabc080ba588c265351a3e32dd5589cecde94b2cf9c1dfde4efbbc2118a0827dc67ad6531a2625ff47879f7db881f7f80d71c0", 0x7c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x4044c83) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000a00)=""/215, 0xd7}, {&(0x7f0000000b00)=""/254, 0xfe}, {&(0x7f0000000c00)=""/186, 0xba}, {&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000580)}, {&(0x7f0000001d80)=""/148, 0x94}], 0x9}}], 0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket(0x10, 0x400000000080803, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) read$FUSE(r8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000002300)=ANY=[@ANYBLOB="04eaba00abfb4814cc000000000000005fbb0000000000000000000000000000000000001657d2d34babee56ca9416749bbb63ea019d521013f55db50c20e04f2e04f5e1a3916de5054f6b4382057e829c25da8c3850efe49f8aab34628afbb95ad09355b9f8ba71fdabbd9d8363db300d394819271022af79c6da4e4c8829cb139822f0749ff77a50deb6b9b39dfe84778f4dacc77e35a49ee005a009eb83514921dda71c772152e7ef446268d2aed2de9f7cc666c53f082550fc8700a98621660545d9b9450f4c6135ead7f5bafc3794e5f6224a3b254381884e5dcc152563"]}) syz_clone3(&(0x7f0000004b40)={0x100000, 0x0, &(0x7f0000000840), &(0x7f0000000880), {0x39}, &(0x7f00000008c0)=""/186, 0xba, &(0x7f0000000980)=""/68, &(0x7f0000004b00)=[0x0, 0x0], 0x2, {r8}}, 0x58) ioctl$TIOCGLCKTRMIOS(r8, 0x5456, &(0x7f0000000040)={0x3f, 0x0, 0x5, 0x776, 0x14, "25eb55e211930000ba00"}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000002400)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="080800000000fbdbdf25020000000800020000000000060006006c62b90b8f339ebb05c69bbeb79cc44573e276a8d177176186feb16e2b758c846fa4be580cc056a3ac78521c67077f04805083075f9188cdf9e5c9b6746267034d", @ANYRES32=r8, @ANYBLOB="08000500ac1414aa060006"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf25000000000800080003000000080009000000000008000200000000000c0003000300000000000000080004007f00000108000100", @ANYRES32=0x0, @ANYBLOB="a709de74039566592160f4e208ce85ca171f5b5eb0924be74d3b77e5725cdd31fefcdcbe4077132566f9f1b5b6e062f0576cc2a53c94aa016bf5fa97a76053bdc52d0717a2d2027016031edf5531c57892c4ca0c8bd7048d2db962d8de37", @ANYRES32, @ANYBLOB="173fb0d1ffb08bfb517aa33d68e71dbcf4805ad22edf15da583cc49e77e0e915a21a632d0200bf78bc857832ea8fc540e621761496e5c612154b158bd45438f3444adece2fa9a4087dfd4a23cf"], 0x50}, 0x1, 0x0, 0x0, 0x4040011}, 0x8c0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 18:07:30 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) [ 1990.376924][ T1215] loop3: detected capacity change from 0 to 64 18:07:30 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x9) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:30 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1990.563971][ T1248] loop1: detected capacity change from 0 to 64 [ 1990.601767][ T1248] syz-executor.1: attempt to access beyond end of device [ 1990.601767][ T1248] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1990.669693][ T1248] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1990.722694][ T1248] syz-executor.1: attempt to access beyond end of device [ 1990.722694][ T1248] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1990.816790][ T1248] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1990.825103][ T28] audit: type=1800 audit(1703095650.879:2724): pid=1248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:31 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:31 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:31 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x9) (async) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000040)) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:31 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:31 executing program 2: ioperm(0xfc03, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) [ 1991.135051][ T1256] loop1: detected capacity change from 0 to 64 [ 1991.147537][ T1257] loop3: detected capacity change from 0 to 64 18:07:31 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:31 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1991.178882][ T1256] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1991.221595][ T1256] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1991.249765][ T28] audit: type=1800 audit(1703095651.309:2725): pid=1256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1991.269645][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:31 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r2, r3+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r4}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) fcntl$setsig(r0, 0xa, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) [ 1991.495691][ T1269] loop3: detected capacity change from 0 to 64 18:07:31 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) ppoll(&(0x7f0000000080)=[{r0, 0x1089}], 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) r5 = open_tree(r4, &(0x7f0000000540)='./file0\x00', 0x10100) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000001300), 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000a80)={"3e4569dae962e62b2bf08b521a712cfd", 0x0, 0x0, {0x4, 0x7fffffff}, {0x400, 0x101}, 0x1, [0x6, 0x6, 0xa70, 0x6, 0x1, 0x2, 0x9, 0x1, 0x1, 0x1ff, 0x3, 0x9, 0xc, 0x400000004, 0x100, 0x9]}) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001400)={r6, 0xffffffffffffffe0, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000640)={r6, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x100000001, 0x3, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff525, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0x3fd, 0x0, 0xb060, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000100)={r6, 0x3, 0x0, [0x0, 0x4, 0x8, 0x81, 0x300000000000], [0xfca4, 0x0, 0x5, 0x3, 0x80000001, 0x7, 0x400, 0x8, 0x7fffffffffffffff, 0x80000001, 0x0, 0xff, 0x572, 0x0, 0x8001, 0xffffffffffff8cd7, 0xfffffffffffffff9, 0x5, 0x4, 0x101, 0x9d0, 0x9, 0xa97, 0x1, 0x6, 0xdd, 0x2, 0x5, 0x5, 0x8, 0x4, 0x5, 0xfffffffffffffffc, 0x3, 0xb5, 0x7fff, 0x7, 0x5, 0x1f, 0x5, 0x0, 0x101, 0x8, 0x8, 0x6, 0x10000, 0xd908, 0x9, 0x42, 0x8, 0x76, 0x4, 0x4, 0x9, 0x5, 0x400, 0x9, 0x7, 0x4fb, 0x2, 0x0, 0x6000000, 0x1ff, 0xffffffff, 0x202, 0x8, 0x910, 0x8, 0x8000000000000001, 0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0x5, 0x200, 0x7fffffffffffffff, 0x0, 0x6, 0x4, 0x0, 0x4adf, 0x7, 0xff, 0x0, 0x88, 0x4, 0xffff, 0x6, 0x802, 0x8, 0x1, 0x5, 0x3ff, 0x2, 0x63, 0x0, 0x7fffffffffffffff, 0x8, 0x4, 0x100000000, 0x9, 0x9, 0x4, 0x7ff, 0x1ff, 0x3, 0x7fffffffffffffff, 0x5, 0x80000000, 0x3, 0x5, 0x8, 0x7, 0x8, 0x1, 0x9, 0x0, 0x9, 0x2, 0x7, 0x5, 0x1]}) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'team0\x00', {0x1}, 0xfff9}) 18:07:31 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x9) (async, rerun: 64) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000040)) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:31 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:31 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:31 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r1, r2+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r3}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10200, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:31 executing program 4: r0 = creat(0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1991.665832][ T1275] loop3: detected capacity change from 0 to 64 [ 1991.679863][ T1276] loop1: detected capacity change from 0 to 64 18:07:31 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r1, r2+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x7, 0x1, 0x400, 0x787c, 0xfffffffa, r3}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:31 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) mkdir(&(0x7f0000000980)='./file1\x00', 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1991.828984][ T1293] loop3: detected capacity change from 0 to 64 18:07:32 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2], 0x44}}, 0x60) 18:07:32 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r1, r2+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) clock_gettime(0x7, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:32 executing program 4: r0 = creat(0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:32 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x12) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) signalfd(r0, &(0x7f0000000000)={[0x499]}, 0x8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) 18:07:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:32 executing program 4: r0 = creat(0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:32 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:32 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r1, r2+60000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xdd0, 0x9}, &(0x7f00000001c0)=0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) [ 1992.119978][ T1387] loop3: detected capacity change from 0 to 64 [ 1992.151482][ T1395] loop1: detected capacity change from 0 to 64 [ 1992.160099][ T1393] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 18:07:32 executing program 0: ioperm(0xfc03, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:32 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x12) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x12) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) signalfd(r0, &(0x7f0000000000)={[0x499]}, 0x8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) 18:07:32 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1992.329637][ T1402] loop3: detected capacity change from 0 to 64 18:07:32 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:07:32 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x1b7c}, {{&(0x7f00000029c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/245, 0xf5}], 0x1}, 0x10000}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002c00)=""/47, 0x2f}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/54, 0x36}, {&(0x7f0000002e40)=""/99, 0x63}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/180, 0xb4}, {&(0x7f0000003080)=""/58, 0x3a}], 0x8}}], 0x3, 0x40022140, &(0x7f0000003240)={r1, r2+60000000}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) [ 1992.452670][ T1408] loop1: detected capacity change from 0 to 64 18:07:32 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) [ 1992.532059][ T1497] loop3: detected capacity change from 0 to 64 18:07:32 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:32 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x12) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) signalfd(r0, &(0x7f0000000000)={[0x499]}, 0x8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) [ 1992.709122][ T1525] loop1: detected capacity change from 0 to 64 18:07:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:33 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000003200)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:33 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:33 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1993.115525][ T1632] loop3: detected capacity change from 0 to 64 18:07:33 executing program 0: ioperm(0xfc03, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:33 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:33 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:33 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:33 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:33 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x4}) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1993.518809][ T1642] loop3: detected capacity change from 0 to 64 18:07:33 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:33 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) [ 1993.712819][ T1651] loop3: detected capacity change from 0 to 64 18:07:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:33 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:33 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:33 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) [ 1993.980055][ T1660] loop3: detected capacity change from 0 to 64 18:07:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:34 executing program 5: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:34 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:34 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x80000, 0x3) pwritev(r1, &(0x7f00000009c0)=[{&(0x7f0000000040)="99d9c988d3d0da61ae7828bd4c73516a79e4525c9e7b6dcf9fc866073da6ff81873a50e442d62e029a5e288db7b74198d5b07249a0e416e27e255faba36fc5518e00708cc85c5ea96da36573185bc8bb30001af2726784d3a5791a1d88b826e0096f747df420da5e9448083eb146ebd7941e3e5fe1060432166eb7b99dfc398422", 0x81}, {&(0x7f0000000100)="224beb0606712b4588fcc4cca3903584a6e207b3d10a86937311421c9e298a4257cb7e68f53b236372cc54722d25b3", 0x2f}, {&(0x7f00000001c0)="b4ec30c6ff58f0a49727c952a9cf61b7f2db1205983f072c947ce125734eebdc3cec762ec8d94834484b2f7c1f95e75c356855e09106412716d5cbca59cf552eaab7038f9d9f7f0b8c95862565167f4189a8c9f3b5a43486acbd940990d80503d6e20bea17e6b08b8df787620e1cca0c369bcd5c726facd7c5bac82d8e34bb79302f6ab60a1149dfc841fa1f64974afc37e9fa34a1b3841b73bbd9aaa87e9cfc5f86cf2ee8a4015506c25faa3b0a70553dc06a658c34853a705ea4b7a5ef83e6d73676cb39a3cf89964e4b9b3b5866991927d2f52b4847c824f3fb93b4bab3ca699b7fbbf724e8100071", 0xea}, {&(0x7f00000002c0)="4d5c2de18c4eddb18696b571d45659cf0a2bdd6a4937b6675e85420df4886793062fbc7ac696c6b61fef42903b405063f31ba9aeca53472992103bc3f911958dd62edfa8e2141f94cd3a50a145c31df3714938e4fd55cf1496d8dd40528a83a6d68d9a5d396fa6de845fcd5f405b8a5739051ebd0218d396e03c31a7e13fb9cef49e7ba07b9704c4", 0x88}, {&(0x7f0000000380)="b52884707a0d9c5ff7e83f5edb510c73b66b8984e5c2df6f68e2a976b6057ae4f213154f3991b677f6144b856c6eea229d0c95a3337b4f775d0dfff7ec341853c080a7b207da85dd25dc89d16dcadb85bbf898f49be7c5b2e872959e59f05a11216cffbde5dc3c7c7c984c31a1cfb80d1ab3f36b1f7c161274d63fe42e0f80b0cb31720a2dfab5e000870669fb393ebd957b44cad7c32a063bff", 0x9a}, {&(0x7f0000000440)="18a5711aa113c6c6750d33ee90354d80531c29c6b3cab97f853e07afb53c7e8cb18ed4086789461a34b936927aed9bb208df7d6c3f6f4d5f4b3dc8a1d939793287632c4f6d773d9509c041868e006fffce28f7f529930559b8f1f7fad007b1129e0dd1ae8906b208bad0da6716a960dd0de2d9e5e5a5a3056269d2c74cc9d1641c7922498135e3533bf189276b7246163510067a78387b66b8d33f20bf070029a0f597df3116257b397f255969f716de9dc0a54a47e2b6ced1e7bc79f238fb4019a2a03f842527285760f5e25329a0b0a3d023521c8b64552fd9746677cdeee525eb2bc9f35e9ce9bc7876994305288930648673", 0xf4}, {&(0x7f0000000740)="149d50f2a16bed939d8074af1b3932e9b95ba9023cb2cacae4c4a23bbf663d4f1e2c0e275bc0866095c81c401cc1467f743250a8a32f7033a374c18f45f8a2129376619ac3e0579e2148bd5051c3983e588a28a811d990a0d7b8ca7121d7d40b44c5c53a081c54b68fee10b932357af6f875619fc24d17304323dad0cbbf1e9488379978bd7c353e2d185d831fa90298154f9b4ed01d1bdd683dfab975d404dbb9e0d64ec3961251cb76037047d5", 0xae}, {&(0x7f0000000800)="6bd7914139939ee166d29c781febe51919b41fa1f16dbcc46e3775ceceb75cc46b30dea4b950144c4c8d580cc9080bea08c6c9d88bcadfa52a88c336686bc4f50ba7d088b2fc395cd04888385e9691183934d583983af15ca18324061bdde3889a7b75ce2b3c5a5e780530a7b42ecdd07f0d9274d25024bb3ed5c4a7be24222c5ba98bbfa8f227304dd536f4102d66fb8a45c47fe3139e4223258dc0b802d00c49576222ca4952d7600552cc968d7001839163a7a2", 0xb5}, {&(0x7f0000000540)}, {&(0x7f00000008c0)="13349d9a8051f9b4ca3d69d50aab17d76dfdeff97b377c1155fecca4e1d2f7e238540538c9416d2bf3aa17e8460c95cac38ef761e353173c2809964e65cc6a4927ed129ae579225cddc406121ff36ef89adadb5c48a663d26249eaa63dee3780257fd2f39fe9f41c354b514bc9a7481c5a7372bdbf2d3ef82a6d8ab530c66fd7d941ac5c46db92ee354bd2e015b630023c6ee3d17dc94bc79090b225da526727b94e8412ca975f8d3f7baf188e1c46cd6ce8d1acb57056f46807267d74001944b4cddb57253175efe69d7200c88c6228e03322795205cf0f028c96d84d1b799e2952ac17", 0xe4}], 0xa, 0x0, 0x6) r2 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000540)={0x0, 0x1, r0}) sendto$inet(r2, &(0x7f0000000ac0)="709d2ea031f7a412ddb84db864c3fa3d965acc715d55bf81cfa278610efc01282605b9d288212b6c0fdf0cce99afe9333445f646f45924ca8c1a571bfac2331193de376e1cc429b0c9873be362e5fc0816803f8d5f055605ab925693917a602ec4281a13688154721ea8e3df1bd3ead54821d5df844948a91dd4dc93672f8cd3584dbec46276fe1538c94ea4ecc7d26071f302a1a5a8455831d7d5fe14fc7ff1abe3e1a3a1fcb0e551383401588e7f756fb46fc16fd94708d0e84e5f51181b06cd0d05ad1a579e804e96730e89fb894f6ad58389f438e52c45ebdef72d6199d0a2f905dfae8ebc", 0xe7, 0x20000000, &(0x7f0000000bc0)={0x2, 0x4e21, @broadcast}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4040) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc8001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000240)=[r5], &(0x7f0000000280)=[0x3ff, 0x1, 0x3, 0x9, 0x800], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000a80)={&(0x7f0000000580)=[r3, r5, 0x0, 0x0], 0x4}) 18:07:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) [ 1994.634955][ T1666] loop1: detected capacity change from 0 to 64 18:07:34 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:34 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1994.707393][ T1666] bio_check_eod: 2 callbacks suppressed [ 1994.707406][ T1666] syz-executor.1: attempt to access beyond end of device [ 1994.707406][ T1666] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1994.780249][ T1666] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1994.797503][ T1666] syz-executor.1: attempt to access beyond end of device [ 1994.797503][ T1666] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1994.864651][ T1666] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1994.893407][ T28] audit: type=1800 audit(1703095654.949:2726): pid=1666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:35 executing program 5: r0 = creat(0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:35 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x80000, 0x3) pwritev(r1, &(0x7f00000009c0)=[{&(0x7f0000000040)="99d9c988d3d0da61ae7828bd4c73516a79e4525c9e7b6dcf9fc866073da6ff81873a50e442d62e029a5e288db7b74198d5b07249a0e416e27e255faba36fc5518e00708cc85c5ea96da36573185bc8bb30001af2726784d3a5791a1d88b826e0096f747df420da5e9448083eb146ebd7941e3e5fe1060432166eb7b99dfc398422", 0x81}, {&(0x7f0000000100)="224beb0606712b4588fcc4cca3903584a6e207b3d10a86937311421c9e298a4257cb7e68f53b236372cc54722d25b3", 0x2f}, {&(0x7f00000001c0)="b4ec30c6ff58f0a49727c952a9cf61b7f2db1205983f072c947ce125734eebdc3cec762ec8d94834484b2f7c1f95e75c356855e09106412716d5cbca59cf552eaab7038f9d9f7f0b8c95862565167f4189a8c9f3b5a43486acbd940990d80503d6e20bea17e6b08b8df787620e1cca0c369bcd5c726facd7c5bac82d8e34bb79302f6ab60a1149dfc841fa1f64974afc37e9fa34a1b3841b73bbd9aaa87e9cfc5f86cf2ee8a4015506c25faa3b0a70553dc06a658c34853a705ea4b7a5ef83e6d73676cb39a3cf89964e4b9b3b5866991927d2f52b4847c824f3fb93b4bab3ca699b7fbbf724e8100071", 0xea}, {&(0x7f00000002c0)="4d5c2de18c4eddb18696b571d45659cf0a2bdd6a4937b6675e85420df4886793062fbc7ac696c6b61fef42903b405063f31ba9aeca53472992103bc3f911958dd62edfa8e2141f94cd3a50a145c31df3714938e4fd55cf1496d8dd40528a83a6d68d9a5d396fa6de845fcd5f405b8a5739051ebd0218d396e03c31a7e13fb9cef49e7ba07b9704c4", 0x88}, {&(0x7f0000000380)="b52884707a0d9c5ff7e83f5edb510c73b66b8984e5c2df6f68e2a976b6057ae4f213154f3991b677f6144b856c6eea229d0c95a3337b4f775d0dfff7ec341853c080a7b207da85dd25dc89d16dcadb85bbf898f49be7c5b2e872959e59f05a11216cffbde5dc3c7c7c984c31a1cfb80d1ab3f36b1f7c161274d63fe42e0f80b0cb31720a2dfab5e000870669fb393ebd957b44cad7c32a063bff", 0x9a}, {&(0x7f0000000440)="18a5711aa113c6c6750d33ee90354d80531c29c6b3cab97f853e07afb53c7e8cb18ed4086789461a34b936927aed9bb208df7d6c3f6f4d5f4b3dc8a1d939793287632c4f6d773d9509c041868e006fffce28f7f529930559b8f1f7fad007b1129e0dd1ae8906b208bad0da6716a960dd0de2d9e5e5a5a3056269d2c74cc9d1641c7922498135e3533bf189276b7246163510067a78387b66b8d33f20bf070029a0f597df3116257b397f255969f716de9dc0a54a47e2b6ced1e7bc79f238fb4019a2a03f842527285760f5e25329a0b0a3d023521c8b64552fd9746677cdeee525eb2bc9f35e9ce9bc7876994305288930648673", 0xf4}, {&(0x7f0000000740)="149d50f2a16bed939d8074af1b3932e9b95ba9023cb2cacae4c4a23bbf663d4f1e2c0e275bc0866095c81c401cc1467f743250a8a32f7033a374c18f45f8a2129376619ac3e0579e2148bd5051c3983e588a28a811d990a0d7b8ca7121d7d40b44c5c53a081c54b68fee10b932357af6f875619fc24d17304323dad0cbbf1e9488379978bd7c353e2d185d831fa90298154f9b4ed01d1bdd683dfab975d404dbb9e0d64ec3961251cb76037047d5", 0xae}, {&(0x7f0000000800)="6bd7914139939ee166d29c781febe51919b41fa1f16dbcc46e3775ceceb75cc46b30dea4b950144c4c8d580cc9080bea08c6c9d88bcadfa52a88c336686bc4f50ba7d088b2fc395cd04888385e9691183934d583983af15ca18324061bdde3889a7b75ce2b3c5a5e780530a7b42ecdd07f0d9274d25024bb3ed5c4a7be24222c5ba98bbfa8f227304dd536f4102d66fb8a45c47fe3139e4223258dc0b802d00c49576222ca4952d7600552cc968d7001839163a7a2", 0xb5}, {&(0x7f0000000540)}, {&(0x7f00000008c0)="13349d9a8051f9b4ca3d69d50aab17d76dfdeff97b377c1155fecca4e1d2f7e238540538c9416d2bf3aa17e8460c95cac38ef761e353173c2809964e65cc6a4927ed129ae579225cddc406121ff36ef89adadb5c48a663d26249eaa63dee3780257fd2f39fe9f41c354b514bc9a7481c5a7372bdbf2d3ef82a6d8ab530c66fd7d941ac5c46db92ee354bd2e015b630023c6ee3d17dc94bc79090b225da526727b94e8412ca975f8d3f7baf188e1c46cd6ce8d1acb57056f46807267d74001944b4cddb57253175efe69d7200c88c6228e03322795205cf0f028c96d84d1b799e2952ac17", 0xe4}], 0xa, 0x0, 0x6) r2 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000540)={0x0, 0x1, r0}) sendto$inet(r2, &(0x7f0000000ac0)="709d2ea031f7a412ddb84db864c3fa3d965acc715d55bf81cfa278610efc01282605b9d288212b6c0fdf0cce99afe9333445f646f45924ca8c1a571bfac2331193de376e1cc429b0c9873be362e5fc0816803f8d5f055605ab925693917a602ec4281a13688154721ea8e3df1bd3ead54821d5df844948a91dd4dc93672f8cd3584dbec46276fe1538c94ea4ecc7d26071f302a1a5a8455831d7d5fe14fc7ff1abe3e1a3a1fcb0e551383401588e7f756fb46fc16fd94708d0e84e5f51181b06cd0d05ad1a579e804e96730e89fb894f6ad58389f438e52c45ebdef72d6199d0a2f905dfae8ebc", 0xe7, 0x20000000, &(0x7f0000000bc0)={0x2, 0x4e21, @broadcast}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4040) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc8001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000240)=[r5], &(0x7f0000000280)=[0x3ff, 0x1, 0x3, 0x9, 0x800], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000a80)={&(0x7f0000000580)=[r3, r5, 0x0, 0x0], 0x4}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) socket$inet(0x2, 0x80000, 0x3) (async) pwritev(r1, &(0x7f00000009c0)=[{&(0x7f0000000040)="99d9c988d3d0da61ae7828bd4c73516a79e4525c9e7b6dcf9fc866073da6ff81873a50e442d62e029a5e288db7b74198d5b07249a0e416e27e255faba36fc5518e00708cc85c5ea96da36573185bc8bb30001af2726784d3a5791a1d88b826e0096f747df420da5e9448083eb146ebd7941e3e5fe1060432166eb7b99dfc398422", 0x81}, {&(0x7f0000000100)="224beb0606712b4588fcc4cca3903584a6e207b3d10a86937311421c9e298a4257cb7e68f53b236372cc54722d25b3", 0x2f}, {&(0x7f00000001c0)="b4ec30c6ff58f0a49727c952a9cf61b7f2db1205983f072c947ce125734eebdc3cec762ec8d94834484b2f7c1f95e75c356855e09106412716d5cbca59cf552eaab7038f9d9f7f0b8c95862565167f4189a8c9f3b5a43486acbd940990d80503d6e20bea17e6b08b8df787620e1cca0c369bcd5c726facd7c5bac82d8e34bb79302f6ab60a1149dfc841fa1f64974afc37e9fa34a1b3841b73bbd9aaa87e9cfc5f86cf2ee8a4015506c25faa3b0a70553dc06a658c34853a705ea4b7a5ef83e6d73676cb39a3cf89964e4b9b3b5866991927d2f52b4847c824f3fb93b4bab3ca699b7fbbf724e8100071", 0xea}, {&(0x7f00000002c0)="4d5c2de18c4eddb18696b571d45659cf0a2bdd6a4937b6675e85420df4886793062fbc7ac696c6b61fef42903b405063f31ba9aeca53472992103bc3f911958dd62edfa8e2141f94cd3a50a145c31df3714938e4fd55cf1496d8dd40528a83a6d68d9a5d396fa6de845fcd5f405b8a5739051ebd0218d396e03c31a7e13fb9cef49e7ba07b9704c4", 0x88}, {&(0x7f0000000380)="b52884707a0d9c5ff7e83f5edb510c73b66b8984e5c2df6f68e2a976b6057ae4f213154f3991b677f6144b856c6eea229d0c95a3337b4f775d0dfff7ec341853c080a7b207da85dd25dc89d16dcadb85bbf898f49be7c5b2e872959e59f05a11216cffbde5dc3c7c7c984c31a1cfb80d1ab3f36b1f7c161274d63fe42e0f80b0cb31720a2dfab5e000870669fb393ebd957b44cad7c32a063bff", 0x9a}, {&(0x7f0000000440)="18a5711aa113c6c6750d33ee90354d80531c29c6b3cab97f853e07afb53c7e8cb18ed4086789461a34b936927aed9bb208df7d6c3f6f4d5f4b3dc8a1d939793287632c4f6d773d9509c041868e006fffce28f7f529930559b8f1f7fad007b1129e0dd1ae8906b208bad0da6716a960dd0de2d9e5e5a5a3056269d2c74cc9d1641c7922498135e3533bf189276b7246163510067a78387b66b8d33f20bf070029a0f597df3116257b397f255969f716de9dc0a54a47e2b6ced1e7bc79f238fb4019a2a03f842527285760f5e25329a0b0a3d023521c8b64552fd9746677cdeee525eb2bc9f35e9ce9bc7876994305288930648673", 0xf4}, {&(0x7f0000000740)="149d50f2a16bed939d8074af1b3932e9b95ba9023cb2cacae4c4a23bbf663d4f1e2c0e275bc0866095c81c401cc1467f743250a8a32f7033a374c18f45f8a2129376619ac3e0579e2148bd5051c3983e588a28a811d990a0d7b8ca7121d7d40b44c5c53a081c54b68fee10b932357af6f875619fc24d17304323dad0cbbf1e9488379978bd7c353e2d185d831fa90298154f9b4ed01d1bdd683dfab975d404dbb9e0d64ec3961251cb76037047d5", 0xae}, {&(0x7f0000000800)="6bd7914139939ee166d29c781febe51919b41fa1f16dbcc46e3775ceceb75cc46b30dea4b950144c4c8d580cc9080bea08c6c9d88bcadfa52a88c336686bc4f50ba7d088b2fc395cd04888385e9691183934d583983af15ca18324061bdde3889a7b75ce2b3c5a5e780530a7b42ecdd07f0d9274d25024bb3ed5c4a7be24222c5ba98bbfa8f227304dd536f4102d66fb8a45c47fe3139e4223258dc0b802d00c49576222ca4952d7600552cc968d7001839163a7a2", 0xb5}, {&(0x7f0000000540)}, {&(0x7f00000008c0)="13349d9a8051f9b4ca3d69d50aab17d76dfdeff97b377c1155fecca4e1d2f7e238540538c9416d2bf3aa17e8460c95cac38ef761e353173c2809964e65cc6a4927ed129ae579225cddc406121ff36ef89adadb5c48a663d26249eaa63dee3780257fd2f39fe9f41c354b514bc9a7481c5a7372bdbf2d3ef82a6d8ab530c66fd7d941ac5c46db92ee354bd2e015b630023c6ee3d17dc94bc79090b225da526727b94e8412ca975f8d3f7baf188e1c46cd6ce8d1acb57056f46807267d74001944b4cddb57253175efe69d7200c88c6228e03322795205cf0f028c96d84d1b799e2952ac17", 0xe4}], 0xa, 0x0, 0x6) (async) syz_io_uring_complete(0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000540)={0x0, 0x1, r0}) (async) sendto$inet(r2, &(0x7f0000000ac0)="709d2ea031f7a412ddb84db864c3fa3d965acc715d55bf81cfa278610efc01282605b9d288212b6c0fdf0cce99afe9333445f646f45924ca8c1a571bfac2331193de376e1cc429b0c9873be362e5fc0816803f8d5f055605ab925693917a602ec4281a13688154721ea8e3df1bd3ead54821d5df844948a91dd4dc93672f8cd3584dbec46276fe1538c94ea4ecc7d26071f302a1a5a8455831d7d5fe14fc7ff1abe3e1a3a1fcb0e551383401588e7f756fb46fc16fd94708d0e84e5f51181b06cd0d05ad1a579e804e96730e89fb894f6ad58389f438e52c45ebdef72d6199d0a2f905dfae8ebc", 0xe7, 0x20000000, &(0x7f0000000bc0)={0x2, 0x4e21, @broadcast}, 0x10) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4040) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc8001, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000000140)={r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000240)=[r5], &(0x7f0000000280)=[0x3ff, 0x1, 0x3, 0x9, 0x800], 0x1, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000a80)={&(0x7f0000000580)=[r3, r5, 0x0, 0x0], 0x4}) (async) 18:07:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x81) 18:07:35 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1995.180087][ T1788] loop1: detected capacity change from 0 to 64 [ 1995.224116][ T1788] syz-executor.1: attempt to access beyond end of device [ 1995.224116][ T1788] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1995.252097][ T1788] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1995.272168][ T1788] syz-executor.1: attempt to access beyond end of device [ 1995.272168][ T1788] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1995.320030][ T1788] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1995.335562][ T28] audit: type=1800 audit(1703095655.389:2727): pid=1788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1995.355441][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:35 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x410101, 0x81) 18:07:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:35 executing program 5: r0 = creat(0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:35 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:35 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x80000, 0x3) (rerun: 64) pwritev(r1, &(0x7f00000009c0)=[{&(0x7f0000000040)="99d9c988d3d0da61ae7828bd4c73516a79e4525c9e7b6dcf9fc866073da6ff81873a50e442d62e029a5e288db7b74198d5b07249a0e416e27e255faba36fc5518e00708cc85c5ea96da36573185bc8bb30001af2726784d3a5791a1d88b826e0096f747df420da5e9448083eb146ebd7941e3e5fe1060432166eb7b99dfc398422", 0x81}, {&(0x7f0000000100)="224beb0606712b4588fcc4cca3903584a6e207b3d10a86937311421c9e298a4257cb7e68f53b236372cc54722d25b3", 0x2f}, {&(0x7f00000001c0)="b4ec30c6ff58f0a49727c952a9cf61b7f2db1205983f072c947ce125734eebdc3cec762ec8d94834484b2f7c1f95e75c356855e09106412716d5cbca59cf552eaab7038f9d9f7f0b8c95862565167f4189a8c9f3b5a43486acbd940990d80503d6e20bea17e6b08b8df787620e1cca0c369bcd5c726facd7c5bac82d8e34bb79302f6ab60a1149dfc841fa1f64974afc37e9fa34a1b3841b73bbd9aaa87e9cfc5f86cf2ee8a4015506c25faa3b0a70553dc06a658c34853a705ea4b7a5ef83e6d73676cb39a3cf89964e4b9b3b5866991927d2f52b4847c824f3fb93b4bab3ca699b7fbbf724e8100071", 0xea}, {&(0x7f00000002c0)="4d5c2de18c4eddb18696b571d45659cf0a2bdd6a4937b6675e85420df4886793062fbc7ac696c6b61fef42903b405063f31ba9aeca53472992103bc3f911958dd62edfa8e2141f94cd3a50a145c31df3714938e4fd55cf1496d8dd40528a83a6d68d9a5d396fa6de845fcd5f405b8a5739051ebd0218d396e03c31a7e13fb9cef49e7ba07b9704c4", 0x88}, {&(0x7f0000000380)="b52884707a0d9c5ff7e83f5edb510c73b66b8984e5c2df6f68e2a976b6057ae4f213154f3991b677f6144b856c6eea229d0c95a3337b4f775d0dfff7ec341853c080a7b207da85dd25dc89d16dcadb85bbf898f49be7c5b2e872959e59f05a11216cffbde5dc3c7c7c984c31a1cfb80d1ab3f36b1f7c161274d63fe42e0f80b0cb31720a2dfab5e000870669fb393ebd957b44cad7c32a063bff", 0x9a}, {&(0x7f0000000440)="18a5711aa113c6c6750d33ee90354d80531c29c6b3cab97f853e07afb53c7e8cb18ed4086789461a34b936927aed9bb208df7d6c3f6f4d5f4b3dc8a1d939793287632c4f6d773d9509c041868e006fffce28f7f529930559b8f1f7fad007b1129e0dd1ae8906b208bad0da6716a960dd0de2d9e5e5a5a3056269d2c74cc9d1641c7922498135e3533bf189276b7246163510067a78387b66b8d33f20bf070029a0f597df3116257b397f255969f716de9dc0a54a47e2b6ced1e7bc79f238fb4019a2a03f842527285760f5e25329a0b0a3d023521c8b64552fd9746677cdeee525eb2bc9f35e9ce9bc7876994305288930648673", 0xf4}, {&(0x7f0000000740)="149d50f2a16bed939d8074af1b3932e9b95ba9023cb2cacae4c4a23bbf663d4f1e2c0e275bc0866095c81c401cc1467f743250a8a32f7033a374c18f45f8a2129376619ac3e0579e2148bd5051c3983e588a28a811d990a0d7b8ca7121d7d40b44c5c53a081c54b68fee10b932357af6f875619fc24d17304323dad0cbbf1e9488379978bd7c353e2d185d831fa90298154f9b4ed01d1bdd683dfab975d404dbb9e0d64ec3961251cb76037047d5", 0xae}, {&(0x7f0000000800)="6bd7914139939ee166d29c781febe51919b41fa1f16dbcc46e3775ceceb75cc46b30dea4b950144c4c8d580cc9080bea08c6c9d88bcadfa52a88c336686bc4f50ba7d088b2fc395cd04888385e9691183934d583983af15ca18324061bdde3889a7b75ce2b3c5a5e780530a7b42ecdd07f0d9274d25024bb3ed5c4a7be24222c5ba98bbfa8f227304dd536f4102d66fb8a45c47fe3139e4223258dc0b802d00c49576222ca4952d7600552cc968d7001839163a7a2", 0xb5}, {&(0x7f0000000540)}, {&(0x7f00000008c0)="13349d9a8051f9b4ca3d69d50aab17d76dfdeff97b377c1155fecca4e1d2f7e238540538c9416d2bf3aa17e8460c95cac38ef761e353173c2809964e65cc6a4927ed129ae579225cddc406121ff36ef89adadb5c48a663d26249eaa63dee3780257fd2f39fe9f41c354b514bc9a7481c5a7372bdbf2d3ef82a6d8ab530c66fd7d941ac5c46db92ee354bd2e015b630023c6ee3d17dc94bc79090b225da526727b94e8412ca975f8d3f7baf188e1c46cd6ce8d1acb57056f46807267d74001944b4cddb57253175efe69d7200c88c6228e03322795205cf0f028c96d84d1b799e2952ac17", 0xe4}], 0xa, 0x0, 0x6) (async, rerun: 64) r2 = syz_io_uring_complete(0x0) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000540)={0x0, 0x1, r0}) (async) sendto$inet(r2, &(0x7f0000000ac0)="709d2ea031f7a412ddb84db864c3fa3d965acc715d55bf81cfa278610efc01282605b9d288212b6c0fdf0cce99afe9333445f646f45924ca8c1a571bfac2331193de376e1cc429b0c9873be362e5fc0816803f8d5f055605ab925693917a602ec4281a13688154721ea8e3df1bd3ead54821d5df844948a91dd4dc93672f8cd3584dbec46276fe1538c94ea4ecc7d26071f302a1a5a8455831d7d5fe14fc7ff1abe3e1a3a1fcb0e551383401588e7f756fb46fc16fd94708d0e84e5f51181b06cd0d05ad1a579e804e96730e89fb894f6ad58389f438e52c45ebdef72d6199d0a2f905dfae8ebc", 0xe7, 0x20000000, &(0x7f0000000bc0)={0x2, 0x4e21, @broadcast}, 0x10) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x4040) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) (async) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0xc8001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000000140)={r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000240)=[r5], &(0x7f0000000280)=[0x3ff, 0x1, 0x3, 0x9, 0x800], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000a80)={&(0x7f0000000580)=[r3, r5, 0x0, 0x0], 0x4}) 18:07:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) [ 1995.574223][ T1897] loop3: detected capacity change from 0 to 64 [ 1995.581523][ T1899] loop1: detected capacity change from 0 to 64 18:07:35 executing program 5: r0 = creat(0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:35 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x410101, 0x81) 18:07:35 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1995.620206][ T1899] syz-executor.1: attempt to access beyond end of device [ 1995.620206][ T1899] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:35 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1995.671676][ T1899] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:35 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1995.742803][ T1899] syz-executor.1: attempt to access beyond end of device [ 1995.742803][ T1899] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1995.770398][ T1929] loop3: detected capacity change from 0 to 64 18:07:35 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:35 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x410101, 0x81) [ 1995.818571][ T1899] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1995.886811][ T28] audit: type=1800 audit(1703095655.939:2728): pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1995.907495][ T1899] syz-executor.1: attempt to access beyond end of device [ 1995.907495][ T1899] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1996.000479][ T1899] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1996.044430][ T28] audit: type=1800 audit(1703095656.079:2729): pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1996.068313][ T1951] loop3: detected capacity change from 0 to 64 [ 1996.082306][ T1899] syz-executor.1: attempt to access beyond end of device [ 1996.082306][ T1899] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1996.120495][ T1899] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1996.173685][ T28] audit: type=1800 audit(1703095656.229:2730): pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1996.194314][ T1899] syz-executor.1: attempt to access beyond end of device [ 1996.194314][ T1899] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1996.227666][ T1899] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1996.269119][ T28] audit: type=1800 audit(1703095656.329:2731): pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1996.293388][ T1899] syz-executor.1: attempt to access beyond end of device [ 1996.293388][ T1899] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 1996.309395][ T1899] Buffer I/O error on dev loop1, logical block 1037, async page read [ 1996.318688][ T28] audit: type=1800 audit(1703095656.379:2732): pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1996.338608][ C0] vkms_vblank_simulate: vblank timer overrun [ 1996.372858][ T28] audit: type=1800 audit(1703095656.409:2733): pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1996.412289][ T28] audit: type=1800 audit(1703095656.409:2734): pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1996.487164][ T28] audit: type=1800 audit(1703095656.409:2735): pid=1899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:36 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:36 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:36 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x81) 18:07:36 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x30c80c2, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:36 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x4, 0x2, 0x7, 0x81, 0x3, 0x4, 0x1}}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sync() 18:07:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:36 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 1996.626959][ T2031] loop1: detected capacity change from 0 to 64 [ 1996.634392][ T2034] loop3: detected capacity change from 0 to 64 18:07:36 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:36 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x81) 18:07:36 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x30c80c2, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:36 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:36 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x40, &(0x7f0000000500)=ANY=[], 0x1, 0x180, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/143, 0x8f}], &(0x7f00000001c0)=[0x0], 0x1}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000004c0)='./file2\x00', 0x60) r1 = creat(&(0x7f0000000240)='./file1\x00', 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000700)={0x800, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/117, 0x75}, {0xfffffffffffffffe}, {&(0x7f0000000580)=""/204, 0xcc}], &(0x7f00000006c0)=[0x9, 0x80, 0x1, 0x4], 0x3}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0x2}}, 0x18) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001c00)={0x3, 0x0, &(0x7f0000001b40)=[{&(0x7f00000008c0)=""/131, 0x83}, {&(0x7f0000000980)=""/22, 0x16}, {&(0x7f00000009c0)=""/83, 0x53}, {&(0x7f0000000a40)=""/220, 0xdc}, {&(0x7f0000000b40)=""/4096, 0x1000}], &(0x7f0000001bc0)=[0x7f, 0x396, 0x80000000, 0x3, 0x7, 0x4, 0x5], 0x5}, 0x20) sync() 18:07:36 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x81) [ 1996.781214][ T2046] loop3: detected capacity change from 0 to 64 [ 1996.813300][ T2048] loop1: detected capacity change from 0 to 64 18:07:37 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:37 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1996.945215][ T2102] loop3: detected capacity change from 0 to 64 18:07:37 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x0) 18:07:37 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1997.155408][ T2186] loop3: detected capacity change from 0 to 64 18:07:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:37 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x30c80c2, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x30c80c2, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) 18:07:37 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x81) 18:07:37 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:37 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x0) (fail_nth: 1) 18:07:37 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:37 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1997.410136][ T2198] loop3: detected capacity change from 0 to 64 [ 1997.420510][ T2200] loop1: detected capacity change from 0 to 64 18:07:37 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x81) [ 1997.452602][ T2198] FAULT_INJECTION: forcing a failure. [ 1997.452602][ T2198] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.511731][ T2198] CPU: 1 PID: 2198 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 1997.522085][ T2198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1997.532150][ T2198] Call Trace: [ 1997.535433][ T2198] [ 1997.538366][ T2198] dump_stack_lvl+0x125/0x1b0 [ 1997.543113][ T2198] should_fail_ex+0x496/0x5b0 [ 1997.547886][ T2198] should_failslab+0x9/0x20 [ 1997.552416][ T2198] kmem_cache_alloc+0x69/0x2f0 18:07:37 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 1997.557202][ T2198] getname_flags.part.0+0x50/0x4e0 [ 1997.562333][ T2198] getname+0x90/0xe0 [ 1997.566254][ T2198] do_sys_openat2+0x100/0x1e0 [ 1997.570952][ T2198] ? build_open_flags+0x690/0x690 [ 1997.575989][ T2198] ? __fget_files+0x1c6/0x340 [ 1997.580680][ T2198] __x64_sys_openat+0x175/0x210 [ 1997.585577][ T2198] ? __ia32_sys_open+0x1e0/0x1e0 [ 1997.590528][ T2198] ? ksys_write+0x1a7/0x250 [ 1997.595043][ T2198] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1997.601034][ T2198] do_syscall_64+0x40/0x110 [ 1997.605552][ T2198] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1997.611451][ T2198] RIP: 0033:0x7fd041c7cbe9 [ 1997.615867][ T2198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1997.635478][ T2198] RSP: 002b:00007fd04299a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1997.643883][ T2198] RAX: ffffffffffffffda RBX: 00007fd041d9bf80 RCX: 00007fd041c7cbe9 [ 1997.651843][ T2198] RDX: 0000000000410101 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 1997.659800][ T2198] RBP: 00007fd04299a120 R08: 0000000000000000 R09: 0000000000000000 [ 1997.667789][ T2198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1997.675750][ T2198] R13: 000000000000000b R14: 00007fd041d9bf80 R15: 00007fff7acdf698 [ 1997.683725][ T2198] 18:07:37 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:37 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:37 executing program 0: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x81) 18:07:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:38 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:38 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:38 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x0) (fail_nth: 2) 18:07:38 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) (fail_nth: 1) 18:07:38 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20301, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x28}}, 0x20000000) [ 1998.155121][ T2361] loop1: detected capacity change from 0 to 64 [ 1998.159078][ T2358] FAULT_INJECTION: forcing a failure. [ 1998.159078][ T2358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1998.178098][ T2360] loop3: detected capacity change from 0 to 64 [ 1998.196699][ T2358] CPU: 1 PID: 2358 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 1998.207048][ T2358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1998.210104][ T2360] FAULT_INJECTION: forcing a failure. [ 1998.210104][ T2360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1998.217096][ T2358] Call Trace: [ 1998.217106][ T2358] [ 1998.217113][ T2358] dump_stack_lvl+0x125/0x1b0 [ 1998.217142][ T2358] should_fail_ex+0x496/0x5b0 [ 1998.245668][ T2358] _copy_from_user+0x30/0xf0 [ 1998.250267][ T2358] copy_msghdr_from_user+0x99/0x160 [ 1998.255479][ T2358] ? __copy_msghdr+0x460/0x460 [ 1998.260270][ T2358] ? find_held_lock+0x2d/0x110 [ 1998.265035][ T2358] ___sys_sendmsg+0xff/0x1d0 [ 1998.269623][ T2358] ? do_recvmmsg+0x740/0x740 [ 1998.274210][ T2358] ? find_held_lock+0x2d/0x110 [ 1998.278984][ T2358] ? __fget_light+0xe6/0x260 [ 1998.283565][ T2358] __sys_sendmsg+0x117/0x1e0 [ 1998.288151][ T2358] ? __sys_sendmsg_sock+0x30/0x30 [ 1998.293180][ T2358] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1998.299153][ T2358] do_syscall_64+0x40/0x110 [ 1998.303650][ T2358] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1998.309540][ T2358] RIP: 0033:0x7f23a787cbe9 [ 1998.313950][ T2358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1998.333550][ T2358] RSP: 002b:00007f23a864f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1998.341956][ T2358] RAX: ffffffffffffffda RBX: 00007f23a799bf80 RCX: 00007f23a787cbe9 [ 1998.349918][ T2358] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 1998.357880][ T2358] RBP: 00007f23a864f120 R08: 0000000000000000 R09: 0000000000000000 [ 1998.365840][ T2358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1998.373802][ T2358] R13: 000000000000000b R14: 00007f23a799bf80 R15: 00007fffae92e7d8 [ 1998.381770][ T2358] [ 1998.390007][ T2360] CPU: 0 PID: 2360 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 1998.400358][ T2360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1998.410413][ T2360] Call Trace: [ 1998.413679][ T2360] [ 1998.416600][ T2360] dump_stack_lvl+0x125/0x1b0 [ 1998.421276][ T2360] should_fail_ex+0x496/0x5b0 [ 1998.425954][ T2360] strncpy_from_user+0x38/0x300 [ 1998.430802][ T2360] getname_flags.part.0+0x93/0x4e0 [ 1998.435912][ T2360] getname+0x90/0xe0 [ 1998.439804][ T2360] do_sys_openat2+0x100/0x1e0 [ 1998.444478][ T2360] ? build_open_flags+0x690/0x690 [ 1998.449498][ T2360] ? __fget_files+0x1c6/0x340 [ 1998.454166][ T2360] __x64_sys_openat+0x175/0x210 [ 1998.459014][ T2360] ? __ia32_sys_open+0x1e0/0x1e0 [ 1998.463947][ T2360] ? ksys_write+0x1a7/0x250 [ 1998.468441][ T2360] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1998.474418][ T2360] do_syscall_64+0x40/0x110 [ 1998.478915][ T2360] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1998.484800][ T2360] RIP: 0033:0x7fd041c7cbe9 [ 1998.489204][ T2360] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1998.508807][ T2360] RSP: 002b:00007fd04299a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1998.517209][ T2360] RAX: ffffffffffffffda RBX: 00007fd041d9bf80 RCX: 00007fd041c7cbe9 [ 1998.525174][ T2360] RDX: 0000000000410101 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 1998.533132][ T2360] RBP: 00007fd04299a120 R08: 0000000000000000 R09: 0000000000000000 [ 1998.541093][ T2360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1998.549053][ T2360] R13: 000000000000000b R14: 00007fd041d9bf80 R15: 00007fff7acdf698 18:07:38 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1998.557021][ T2360] [ 1998.560087][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:38 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:38 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) (fail_nth: 2) 18:07:38 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:38 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:38 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 1998.734270][ T2384] FAULT_INJECTION: forcing a failure. [ 1998.734270][ T2384] name failslab, interval 1, probability 0, space 0, times 0 [ 1998.786422][ T2384] CPU: 0 PID: 2384 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 1998.796776][ T2384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1998.806841][ T2384] Call Trace: [ 1998.810123][ T2384] [ 1998.813059][ T2384] dump_stack_lvl+0x125/0x1b0 [ 1998.817758][ T2384] should_fail_ex+0x496/0x5b0 [ 1998.822459][ T2384] should_failslab+0x9/0x20 [ 1998.826972][ T2384] kmem_cache_alloc_node+0x71/0x330 [ 1998.832182][ T2384] ? __alloc_skb+0x287/0x330 [ 1998.836794][ T2384] __alloc_skb+0x287/0x330 [ 1998.841235][ T2384] ? __napi_build_skb+0x50/0x50 [ 1998.846100][ T2384] ? __netlink_dump_start+0x960/0x9c0 [ 1998.851492][ T2384] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1998.857402][ T2384] ? apparmor_socket_getpeersec_dgram+0x9/0x10 [ 1998.863577][ T2384] netlink_sendmsg+0x9c6/0xe40 [ 1998.868362][ T2384] ? netlink_unicast+0x810/0x810 [ 1998.873319][ T2384] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1998.878629][ T2384] ? netlink_unicast+0x810/0x810 [ 1998.883586][ T2384] __sock_sendmsg+0xd5/0x180 [ 1998.888195][ T2384] ____sys_sendmsg+0x6ac/0x940 [ 1998.892953][ T2384] ? copy_msghdr_from_user+0x10b/0x160 [ 1998.898406][ T2384] ? kernel_sendmsg+0x50/0x50 [ 1998.903087][ T2384] ? find_held_lock+0x2d/0x110 [ 1998.907854][ T2384] ___sys_sendmsg+0x135/0x1d0 [ 1998.912532][ T2384] ? do_recvmmsg+0x740/0x740 [ 1998.917119][ T2384] ? find_held_lock+0x2d/0x110 [ 1998.921896][ T2384] ? __fget_light+0xe6/0x260 [ 1998.926482][ T2384] __sys_sendmsg+0x117/0x1e0 [ 1998.931070][ T2384] ? __sys_sendmsg_sock+0x30/0x30 [ 1998.936098][ T2384] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1998.942072][ T2384] do_syscall_64+0x40/0x110 [ 1998.946572][ T2384] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1998.952477][ T2384] RIP: 0033:0x7f23a787cbe9 [ 1998.956891][ T2384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1998.976490][ T2384] RSP: 002b:00007f23a864f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1998.984894][ T2384] RAX: ffffffffffffffda RBX: 00007f23a799bf80 RCX: 00007f23a787cbe9 [ 1998.992853][ T2384] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 1999.000811][ T2384] RBP: 00007f23a864f120 R08: 0000000000000000 R09: 0000000000000000 [ 1999.008772][ T2384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1999.016730][ T2384] R13: 000000000000000b R14: 00007f23a799bf80 R15: 00007fffae92e7d8 [ 1999.024699][ T2384] [ 1999.027817][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:39 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x0) (fail_nth: 3) 18:07:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x20000023896) 18:07:39 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:39 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20301, 0x0) (async) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20301, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x28}}, 0x20000000) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x28}}, 0x20000000) 18:07:39 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) (fail_nth: 3) 18:07:39 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:39 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:39 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:39 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 1999.217071][ T2487] loop1: detected capacity change from 0 to 64 [ 1999.245847][ T2490] loop3: detected capacity change from 0 to 64 18:07:39 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) (fail_nth: 4) 18:07:39 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:39 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20301, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x28}}, 0x20000000) [ 1999.349887][ T2490] FAULT_INJECTION: forcing a failure. [ 1999.349887][ T2490] name failslab, interval 1, probability 0, space 0, times 0 [ 1999.410691][ T2490] CPU: 1 PID: 2490 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 1999.421065][ T2490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1999.427040][ T2604] FAULT_INJECTION: forcing a failure. [ 1999.427040][ T2604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1999.431118][ T2490] Call Trace: [ 1999.431126][ T2490] [ 1999.431133][ T2490] dump_stack_lvl+0x125/0x1b0 [ 1999.431161][ T2490] should_fail_ex+0x496/0x5b0 [ 1999.459763][ T2490] should_failslab+0x9/0x20 [ 1999.464274][ T2490] kmem_cache_alloc+0x69/0x2f0 [ 1999.469045][ T2490] alloc_empty_file+0x73/0x1d0 [ 1999.473806][ T2490] path_openat+0xdc/0x2c50 [ 1999.478220][ T2490] ? hlock_class+0x4e/0x130 [ 1999.482724][ T2490] ? __lock_acquire+0x14f0/0x3b20 [ 1999.487751][ T2490] ? path_lookupat+0x770/0x770 [ 1999.492507][ T2490] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 1999.498485][ T2490] do_filp_open+0x1de/0x430 [ 1999.502986][ T2490] ? may_open_dev+0xf0/0xf0 [ 1999.507497][ T2490] ? _raw_spin_unlock+0x28/0x40 [ 1999.512339][ T2490] ? alloc_fd+0x2da/0x6c0 [ 1999.516666][ T2490] do_sys_openat2+0x176/0x1e0 [ 1999.521344][ T2490] ? build_open_flags+0x690/0x690 [ 1999.526364][ T2490] ? __fget_files+0x1c6/0x340 [ 1999.531039][ T2490] __x64_sys_openat+0x175/0x210 [ 1999.535891][ T2490] ? __ia32_sys_open+0x1e0/0x1e0 [ 1999.540832][ T2490] ? ksys_write+0x1a7/0x250 [ 1999.545329][ T2490] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1999.551300][ T2490] do_syscall_64+0x40/0x110 [ 1999.555801][ T2490] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1999.561683][ T2490] RIP: 0033:0x7fd041c7cbe9 [ 1999.566091][ T2490] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1999.585688][ T2490] RSP: 002b:00007fd04299a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1999.594095][ T2490] RAX: ffffffffffffffda RBX: 00007fd041d9bf80 RCX: 00007fd041c7cbe9 [ 1999.602229][ T2490] RDX: 0000000000410101 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 1999.610190][ T2490] RBP: 00007fd04299a120 R08: 0000000000000000 R09: 0000000000000000 [ 1999.618148][ T2490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1999.626106][ T2490] R13: 000000000000000b R14: 00007fd041d9bf80 R15: 00007fff7acdf698 [ 1999.634074][ T2490] [ 1999.680590][ T2608] loop1: detected capacity change from 0 to 64 [ 1999.713464][ T2604] CPU: 1 PID: 2604 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 1999.723823][ T2604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1999.733894][ T2604] Call Trace: [ 1999.737184][ T2604] [ 1999.740129][ T2604] dump_stack_lvl+0x125/0x1b0 [ 1999.744836][ T2604] should_fail_ex+0x496/0x5b0 [ 1999.749545][ T2604] _copy_from_iter+0x246/0x10f0 [ 1999.754411][ T2604] ? __build_skb_around+0x278/0x3a0 [ 1999.759627][ T2604] ? page_copy_sane+0x2c0/0x2c0 [ 1999.764495][ T2604] ? __napi_build_skb+0x50/0x50 [ 1999.769360][ T2604] ? __netlink_dump_start+0x960/0x9c0 [ 1999.774736][ T2604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1999.780623][ T2604] ? __virt_addr_valid+0x5e/0x2d0 [ 1999.785640][ T2604] ? __phys_addr_symbol+0x30/0x70 [ 1999.790658][ T2604] ? __check_object_size+0x323/0x730 [ 1999.795942][ T2604] netlink_sendmsg+0x897/0xe40 [ 1999.800698][ T2604] ? netlink_unicast+0x810/0x810 [ 1999.805721][ T2604] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1999.810999][ T2604] ? netlink_unicast+0x810/0x810 [ 1999.815926][ T2604] __sock_sendmsg+0xd5/0x180 [ 1999.820514][ T2604] ____sys_sendmsg+0x6ac/0x940 [ 1999.825272][ T2604] ? copy_msghdr_from_user+0x10b/0x160 [ 1999.830726][ T2604] ? kernel_sendmsg+0x50/0x50 [ 1999.835398][ T2604] ? find_held_lock+0x2d/0x110 [ 1999.840162][ T2604] ___sys_sendmsg+0x135/0x1d0 [ 1999.844836][ T2604] ? do_recvmmsg+0x740/0x740 [ 1999.849421][ T2604] ? find_held_lock+0x2d/0x110 [ 1999.854196][ T2604] ? __fget_light+0xe6/0x260 [ 1999.858779][ T2604] __sys_sendmsg+0x117/0x1e0 [ 1999.863366][ T2604] ? __sys_sendmsg_sock+0x30/0x30 [ 1999.868401][ T2604] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1999.874375][ T2604] do_syscall_64+0x40/0x110 [ 1999.878872][ T2604] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1999.884752][ T2604] RIP: 0033:0x7f23a787cbe9 [ 1999.889156][ T2604] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1999.908759][ T2604] RSP: 002b:00007f23a864f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1999.917163][ T2604] RAX: ffffffffffffffda RBX: 00007f23a799bf80 RCX: 00007f23a787cbe9 18:07:39 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x0) (fail_nth: 4) [ 1999.925127][ T2604] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 1999.933084][ T2604] RBP: 00007f23a864f120 R08: 0000000000000000 R09: 0000000000000000 [ 1999.941040][ T2604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1999.948996][ T2604] R13: 000000000000000b R14: 00007f23a799bf80 R15: 00007fffae92e7d8 [ 1999.956966][ T2604] 18:07:40 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x20000023896) 18:07:40 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:40 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:40 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x1f, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x2) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, 0xee01, 0x900) open(&(0x7f0000000040)='./file2\x00', 0x40100, 0x2) [ 2000.017174][ T2711] loop3: detected capacity change from 0 to 64 [ 2000.069102][ T2711] FAULT_INJECTION: forcing a failure. [ 2000.069102][ T2711] name failslab, interval 1, probability 0, space 0, times 0 [ 2000.094866][ T2711] CPU: 0 PID: 2711 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2000.105199][ T2711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2000.115237][ T2711] Call Trace: [ 2000.118500][ T2711] [ 2000.121417][ T2711] dump_stack_lvl+0x125/0x1b0 [ 2000.126083][ T2711] should_fail_ex+0x496/0x5b0 [ 2000.130752][ T2711] should_failslab+0x9/0x20 [ 2000.135238][ T2711] kmem_cache_alloc+0x69/0x2f0 [ 2000.139986][ T2711] ? memcg_slab_post_alloc_hook+0x1e8/0x380 [ 2000.145863][ T2711] security_file_alloc+0x41/0x250 [ 2000.150870][ T2711] ? kmem_cache_alloc+0x1af/0x2f0 [ 2000.155879][ T2711] init_file+0x99/0x250 [ 2000.160019][ T2711] alloc_empty_file+0x91/0x1d0 [ 2000.164772][ T2711] path_openat+0xdc/0x2c50 [ 2000.169170][ T2711] ? hlock_class+0x4e/0x130 [ 2000.173657][ T2711] ? __lock_acquire+0x14f0/0x3b20 [ 2000.178671][ T2711] ? path_lookupat+0x770/0x770 [ 2000.183416][ T2711] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2000.189386][ T2711] do_filp_open+0x1de/0x430 [ 2000.193872][ T2711] ? may_open_dev+0xf0/0xf0 [ 2000.198369][ T2711] ? _raw_spin_unlock+0x28/0x40 [ 2000.203200][ T2711] ? alloc_fd+0x2da/0x6c0 [ 2000.207514][ T2711] do_sys_openat2+0x176/0x1e0 [ 2000.212173][ T2711] ? build_open_flags+0x690/0x690 [ 2000.217182][ T2711] ? __fget_files+0x1c6/0x340 [ 2000.221838][ T2711] __x64_sys_openat+0x175/0x210 [ 2000.226670][ T2711] ? __ia32_sys_open+0x1e0/0x1e0 [ 2000.231590][ T2711] ? ksys_write+0x1a7/0x250 [ 2000.236069][ T2711] ? syscall_enter_from_user_mode+0x7f/0x120 [ 2000.242031][ T2711] do_syscall_64+0x40/0x110 [ 2000.246527][ T2711] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2000.252419][ T2711] RIP: 0033:0x7fd041c7cbe9 [ 2000.256832][ T2711] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2000.276418][ T2711] RSP: 002b:00007fd04299a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2000.284810][ T2711] RAX: ffffffffffffffda RBX: 00007fd041d9bf80 RCX: 00007fd041c7cbe9 [ 2000.292760][ T2711] RDX: 0000000000410101 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 2000.300713][ T2711] RBP: 00007fd04299a120 R08: 0000000000000000 R09: 0000000000000000 [ 2000.308668][ T2711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2000.316621][ T2711] R13: 000000000000000b R14: 00007fd041d9bf80 R15: 00007fff7acdf698 [ 2000.324578][ T2711] [ 2000.327668][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:40 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x0) (fail_nth: 5) 18:07:40 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) (fail_nth: 5) 18:07:40 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:40 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, r0, 0x0, 0x20000023896) 18:07:40 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) [ 2000.467843][ T2720] loop1: detected capacity change from 0 to 64 [ 2000.470256][ T2728] loop3: detected capacity change from 0 to 64 [ 2000.490523][ T2728] FAULT_INJECTION: forcing a failure. [ 2000.490523][ T2728] name failslab, interval 1, probability 0, space 0, times 0 [ 2000.518232][ T2730] FAULT_INJECTION: forcing a failure. [ 2000.518232][ T2730] name failslab, interval 1, probability 0, space 0, times 0 [ 2000.531427][ T2728] CPU: 1 PID: 2728 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2000.541765][ T2728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2000.551817][ T2728] Call Trace: [ 2000.555091][ T2728] [ 2000.558022][ T2728] dump_stack_lvl+0x125/0x1b0 [ 2000.562720][ T2728] should_fail_ex+0x496/0x5b0 [ 2000.567411][ T2728] should_failslab+0x9/0x20 [ 2000.571920][ T2728] kmem_cache_alloc_lru+0x7a/0x6f0 [ 2000.577044][ T2728] ? print_usage_bug.part.0+0x550/0x550 [ 2000.582612][ T2728] ? __d_alloc+0x32/0xac0 [ 2000.586948][ T2728] ? __d_alloc+0x32/0xac0 [ 2000.591277][ T2728] __d_alloc+0x32/0xac0 [ 2000.595447][ T2728] d_alloc+0x4e/0x220 [ 2000.599441][ T2728] d_alloc_parallel+0xe9/0x12d0 [ 2000.604307][ T2728] ? __d_lookup_rcu+0x4e0/0x4e0 [ 2000.609152][ T2728] ? lockdep_init_map_type+0x16d/0x7d0 [ 2000.614623][ T2728] ? lockdep_init_map_type+0x16d/0x7d0 [ 2000.620079][ T2728] __lookup_slow+0x194/0x450 [ 2000.624659][ T2728] ? lookup_open.isra.0+0x13b0/0x13b0 [ 2000.630027][ T2728] ? secondary_startup_64_no_verify+0x11b/0x16b [ 2000.636270][ T2728] ? secondary_startup_64_no_verify+0x11b/0x16b [ 2000.642506][ T2728] ? lookup_fast+0x155/0x520 [ 2000.647093][ T2728] walk_component+0x349/0x5a0 [ 2000.651763][ T2728] path_lookupat+0x17f/0x770 [ 2000.656350][ T2728] path_openat+0xbcc/0x2c50 [ 2000.660845][ T2728] ? hlock_class+0x4e/0x130 [ 2000.665338][ T2728] ? __lock_acquire+0x14f0/0x3b20 [ 2000.670365][ T2728] ? path_lookupat+0x770/0x770 [ 2000.675123][ T2728] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2000.681103][ T2728] do_filp_open+0x1de/0x430 [ 2000.685606][ T2728] ? may_open_dev+0xf0/0xf0 [ 2000.690120][ T2728] ? _raw_spin_unlock+0x28/0x40 [ 2000.694959][ T2728] ? alloc_fd+0x2da/0x6c0 [ 2000.699286][ T2728] do_sys_openat2+0x176/0x1e0 [ 2000.703960][ T2728] ? build_open_flags+0x690/0x690 [ 2000.708979][ T2728] ? __fget_files+0x1c6/0x340 [ 2000.713646][ T2728] __x64_sys_openat+0x175/0x210 [ 2000.718493][ T2728] ? __ia32_sys_open+0x1e0/0x1e0 [ 2000.723426][ T2728] ? ksys_write+0x1a7/0x250 [ 2000.727924][ T2728] ? syscall_enter_from_user_mode+0x7f/0x120 [ 2000.733895][ T2728] do_syscall_64+0x40/0x110 [ 2000.738395][ T2728] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2000.744285][ T2728] RIP: 0033:0x7fd041c7cbe9 [ 2000.748692][ T2728] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2000.768294][ T2728] RSP: 002b:00007fd04299a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2000.776697][ T2728] RAX: ffffffffffffffda RBX: 00007fd041d9bf80 RCX: 00007fd041c7cbe9 [ 2000.784661][ T2728] RDX: 0000000000410101 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 2000.792622][ T2728] RBP: 00007fd04299a120 R08: 0000000000000000 R09: 0000000000000000 [ 2000.800578][ T2728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2000.808537][ T2728] R13: 000000000000000b R14: 00007fd041d9bf80 R15: 00007fff7acdf698 [ 2000.816504][ T2728] [ 2000.823476][ T2720] bio_check_eod: 23 callbacks suppressed [ 2000.823488][ T2720] syz-executor.1: attempt to access beyond end of device [ 2000.823488][ T2720] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2000.829580][ T2730] CPU: 0 PID: 2730 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2000.851624][ T2720] buffer_io_error: 23 callbacks suppressed [ 2000.851636][ T2720] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2000.852893][ T2730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2000.852907][ T2730] Call Trace: [ 2000.852915][ T2730] [ 2000.852923][ T2730] dump_stack_lvl+0x125/0x1b0 [ 2000.887696][ T2730] should_fail_ex+0x496/0x5b0 [ 2000.892401][ T2730] should_failslab+0x9/0x20 [ 2000.896937][ T2730] __kmem_cache_alloc_node+0x6b/0x310 [ 2000.902328][ T2730] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x280 [ 2000.909617][ T2730] ? __mutex_trylock_common+0xeb/0x250 [ 2000.915075][ T2730] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x280 [ 2000.922353][ T2730] __kmalloc+0x49/0x90 [ 2000.926419][ T2730] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x280 [ 2000.933527][ T2730] genl_family_rcv_msg_doit+0xbf/0x2e0 [ 2000.938980][ T2730] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2000.946346][ T2730] ? security_capable+0x92/0xc0 [ 2000.951194][ T2730] genl_rcv_msg+0x561/0x800 [ 2000.955694][ T2730] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2000.961578][ T2730] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2000.967556][ T2730] ? nl802154_dump_wpan_phy+0x9d0/0x9d0 [ 2000.973098][ T2730] ? nl802154_set_ackreq_default+0x420/0x420 [ 2000.979071][ T2730] ? nl802154_wpan_phy_netns+0x2d0/0x2d0 [ 2000.984698][ T2730] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2000.990680][ T2730] netlink_rcv_skb+0x16b/0x440 [ 2000.995431][ T2730] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2001.001317][ T2730] ? netlink_ack+0x1380/0x1380 [ 2001.006076][ T2730] ? down_read+0xc9/0x330 [ 2001.010397][ T2730] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 2001.016105][ T2730] ? netlink_deliver_tap+0x1a0/0xd00 [ 2001.021389][ T2730] ? _copy_from_iter+0x2c1/0x10f0 [ 2001.026411][ T2730] genl_rcv+0x28/0x40 [ 2001.030380][ T2730] netlink_unicast+0x53b/0x810 [ 2001.035132][ T2730] ? netlink_attachskb+0x880/0x880 [ 2001.040245][ T2730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2001.046130][ T2730] ? __phys_addr_symbol+0x30/0x70 [ 2001.051147][ T2730] ? __check_object_size+0x323/0x730 [ 2001.056428][ T2730] netlink_sendmsg+0x93c/0xe40 [ 2001.061190][ T2730] ? netlink_unicast+0x810/0x810 [ 2001.066123][ T2730] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2001.071401][ T2730] ? netlink_unicast+0x810/0x810 [ 2001.076327][ T2730] __sock_sendmsg+0xd5/0x180 [ 2001.080911][ T2730] ____sys_sendmsg+0x6ac/0x940 [ 2001.085672][ T2730] ? copy_msghdr_from_user+0x10b/0x160 [ 2001.091128][ T2730] ? kernel_sendmsg+0x50/0x50 [ 2001.095802][ T2730] ? find_held_lock+0x2d/0x110 [ 2001.100568][ T2730] ___sys_sendmsg+0x135/0x1d0 [ 2001.105247][ T2730] ? do_recvmmsg+0x740/0x740 [ 2001.109831][ T2730] ? find_held_lock+0x2d/0x110 [ 2001.114607][ T2730] ? __fget_light+0xe6/0x260 [ 2001.119191][ T2730] __sys_sendmsg+0x117/0x1e0 [ 2001.123785][ T2730] ? __sys_sendmsg_sock+0x30/0x30 [ 2001.128815][ T2730] ? syscall_enter_from_user_mode+0x7f/0x120 [ 2001.134789][ T2730] do_syscall_64+0x40/0x110 [ 2001.139289][ T2730] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2001.145169][ T2730] RIP: 0033:0x7f23a787cbe9 [ 2001.149572][ T2730] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2001.169167][ T2730] RSP: 002b:00007f23a864f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2001.177567][ T2730] RAX: ffffffffffffffda RBX: 00007f23a799bf80 RCX: 00007f23a787cbe9 [ 2001.185526][ T2730] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 2001.193485][ T2730] RBP: 00007f23a864f120 R08: 0000000000000000 R09: 0000000000000000 [ 2001.201446][ T2730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2001.209405][ T2730] R13: 000000000000000b R14: 00007f23a799bf80 R15: 00007fffae92e7d8 [ 2001.217379][ T2730] [ 2001.220452][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:40 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:41 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x0) (fail_nth: 6) 18:07:41 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) (fail_nth: 6) [ 2001.247633][ T2720] syz-executor.1: attempt to access beyond end of device [ 2001.247633][ T2720] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2001.285744][ T2795] loop3: detected capacity change from 0 to 64 18:07:41 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 2001.341649][ T2720] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2001.361569][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 2001.361581][ T28] audit: type=1800 audit(1703095661.409:2754): pid=2720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:41 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:41 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x1f, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x2) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, 0xee01, 0x900) open(&(0x7f0000000040)='./file2\x00', 0x40100, 0x2) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x1f, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x7}) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, 0xee01, 0x900) (async) open(&(0x7f0000000040)='./file2\x00', 0x40100, 0x2) (async) 18:07:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) [ 2001.395399][ T2844] FAULT_INJECTION: forcing a failure. [ 2001.395399][ T2844] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.426447][ T2844] CPU: 0 PID: 2844 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2001.436790][ T2844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2001.446836][ T2844] Call Trace: [ 2001.450105][ T2844] [ 2001.453026][ T2844] dump_stack_lvl+0x125/0x1b0 [ 2001.457702][ T2844] should_fail_ex+0x496/0x5b0 [ 2001.462380][ T2844] should_failslab+0x9/0x20 [ 2001.466876][ T2844] kmem_cache_alloc_node+0x71/0x330 [ 2001.472066][ T2844] ? __alloc_skb+0x287/0x330 [ 2001.476655][ T2844] __alloc_skb+0x287/0x330 [ 2001.481064][ T2844] ? __napi_build_skb+0x50/0x50 [ 2001.485903][ T2844] ? security_capable+0x92/0xc0 [ 2001.490750][ T2844] netlink_ack+0x3bb/0x1380 [ 2001.495243][ T2844] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2001.501126][ T2844] ? netlink_sendmsg+0xe40/0xe40 [ 2001.506051][ T2844] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2001.512031][ T2844] netlink_rcv_skb+0x345/0x440 [ 2001.516784][ T2844] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2001.522669][ T2844] ? netlink_ack+0x1380/0x1380 [ 2001.527431][ T2844] ? down_read+0xc9/0x330 [ 2001.531752][ T2844] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 2001.537460][ T2844] ? netlink_deliver_tap+0x1a0/0xd00 [ 2001.542742][ T2844] ? _copy_from_iter+0x2c1/0x10f0 [ 2001.547767][ T2844] genl_rcv+0x28/0x40 [ 2001.551740][ T2844] netlink_unicast+0x53b/0x810 [ 2001.556499][ T2844] ? netlink_attachskb+0x880/0x880 [ 2001.561599][ T2844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2001.567488][ T2844] ? __phys_addr_symbol+0x30/0x70 [ 2001.572507][ T2844] ? __check_object_size+0x323/0x730 [ 2001.577786][ T2844] netlink_sendmsg+0x93c/0xe40 [ 2001.582542][ T2844] ? netlink_unicast+0x810/0x810 [ 2001.587471][ T2844] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2001.592747][ T2844] ? netlink_unicast+0x810/0x810 [ 2001.597674][ T2844] __sock_sendmsg+0xd5/0x180 [ 2001.602260][ T2844] ____sys_sendmsg+0x6ac/0x940 [ 2001.607019][ T2844] ? copy_msghdr_from_user+0x10b/0x160 [ 2001.612475][ T2844] ? kernel_sendmsg+0x50/0x50 [ 2001.617148][ T2844] ? find_held_lock+0x2d/0x110 [ 2001.621907][ T2844] ___sys_sendmsg+0x135/0x1d0 [ 2001.626583][ T2844] ? do_recvmmsg+0x740/0x740 [ 2001.631167][ T2844] ? find_held_lock+0x2d/0x110 [ 2001.635945][ T2844] ? __fget_light+0xe6/0x260 [ 2001.640528][ T2844] __sys_sendmsg+0x117/0x1e0 [ 2001.645116][ T2844] ? __sys_sendmsg_sock+0x30/0x30 [ 2001.650145][ T2844] ? syscall_enter_from_user_mode+0x7f/0x120 [ 2001.656119][ T2844] do_syscall_64+0x40/0x110 [ 2001.660615][ T2844] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2001.666502][ T2844] RIP: 0033:0x7f23a787cbe9 [ 2001.670904][ T2844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2001.690500][ T2844] RSP: 002b:00007f23a864f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2001.698901][ T2844] RAX: ffffffffffffffda RBX: 00007f23a799bf80 RCX: 00007f23a787cbe9 [ 2001.706864][ T2844] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 2001.714822][ T2844] RBP: 00007f23a864f120 R08: 0000000000000000 R09: 0000000000000000 [ 2001.722783][ T2844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2001.730744][ T2844] R13: 000000000000000b R14: 00007f23a799bf80 R15: 00007fffae92e7d8 [ 2001.738715][ T2844] 18:07:41 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) (fail_nth: 7) [ 2001.741847][ C0] vkms_vblank_simulate: vblank timer overrun [ 2001.757235][ T2795] FAULT_INJECTION: forcing a failure. [ 2001.757235][ T2795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:07:41 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:41 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) (fail_nth: 8) [ 2001.864966][ T2795] CPU: 1 PID: 2795 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2001.875332][ T2795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2001.885396][ T2795] Call Trace: [ 2001.888683][ T2795] [ 2001.891624][ T2795] dump_stack_lvl+0x125/0x1b0 [ 2001.896332][ T2795] should_fail_ex+0x496/0x5b0 [ 2001.901042][ T2795] ? fs_reclaim_acquire+0xb0/0x150 [ 2001.904050][ T2857] FAULT_INJECTION: forcing a failure. [ 2001.904050][ T2857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2001.906163][ T2795] __should_fail_alloc_page+0xe7/0x130 [ 2001.906193][ T2795] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 2001.906226][ T2795] ? print_usage_bug.part.0+0x550/0x550 [ 2001.936343][ T2795] __alloc_pages+0x193/0x2420 [ 2001.941035][ T2795] ? hlock_class+0x4e/0x130 [ 2001.945540][ T2795] ? __lock_acquire+0xc65/0x3b20 [ 2001.950495][ T2795] ? warn_alloc+0x3a0/0x3a0 [ 2001.955015][ T2795] ? mark_lock+0xb5/0xc50 [ 2001.959359][ T2795] ? lockdep_hardirqs_on_prepare+0x420/0x420 18:07:42 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 2001.965368][ T2795] ? hlock_class+0x4e/0x130 [ 2001.969896][ T2795] ? find_held_lock+0x2d/0x110 [ 2001.974661][ T2795] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2001.980570][ T2795] ? policy_nodemask+0x313/0x480 [ 2001.985518][ T2795] alloc_pages_mpol+0x258/0x5f0 [ 2001.990403][ T2795] ? mempolicy_in_oom_domain+0x150/0x150 [ 2001.996065][ T2795] ? filemap_get_entry+0x23e/0x460 [ 2002.001193][ T2795] ? __folio_lock_or_retry+0x700/0x700 [ 2002.006665][ T2795] folio_alloc+0x1e/0xe0 [ 2002.010926][ T2795] filemap_alloc_folio+0x3bb/0x490 [ 2002.016061][ T2795] ? __probestub_file_check_and_advance_wb_err+0x10/0x10 [ 2002.023107][ T2795] ? __filemap_get_folio+0x2b0/0xaa0 [ 2002.028404][ T2795] do_read_cache_folio+0x1b8/0x540 [ 2002.033537][ T2795] ? minix_bmap+0x30/0x30 [ 2002.037877][ T2795] read_cache_page+0x5b/0x160 [ 2002.042571][ T2795] minix_find_entry+0x1f6/0x610 [ 2002.047422][ T2795] ? d_alloc_parallel+0x6b9/0x12d0 [ 2002.052555][ T2795] minix_inode_by_name+0x75/0x260 [ 2002.057595][ T2795] ? minix_dotdot+0x180/0x180 [ 2002.062275][ T2795] ? lockdep_init_map_type+0x16d/0x7d0 [ 2002.067756][ T2795] minix_lookup+0x107/0x190 [ 2002.072282][ T2795] __lookup_slow+0x24d/0x450 [ 2002.076881][ T2795] ? lookup_open.isra.0+0x13b0/0x13b0 [ 2002.082267][ T2795] ? secondary_startup_64_no_verify+0x11b/0x16b [ 2002.088520][ T2795] ? secondary_startup_64_no_verify+0x11b/0x16b [ 2002.094769][ T2795] ? lookup_fast+0x155/0x520 [ 2002.099393][ T2795] walk_component+0x349/0x5a0 [ 2002.104088][ T2795] path_lookupat+0x17f/0x770 [ 2002.108667][ T2795] path_openat+0xbcc/0x2c50 [ 2002.113157][ T2795] ? hlock_class+0x4e/0x130 [ 2002.117654][ T2795] ? __lock_acquire+0x14f0/0x3b20 [ 2002.122685][ T2795] ? path_lookupat+0x770/0x770 [ 2002.127446][ T2795] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2002.133449][ T2795] do_filp_open+0x1de/0x430 [ 2002.137939][ T2795] ? may_open_dev+0xf0/0xf0 [ 2002.142436][ T2795] ? _raw_spin_unlock+0x28/0x40 [ 2002.147271][ T2795] ? alloc_fd+0x2da/0x6c0 [ 2002.151588][ T2795] do_sys_openat2+0x176/0x1e0 [ 2002.156255][ T2795] ? build_open_flags+0x690/0x690 [ 2002.161288][ T2795] ? __fget_files+0x1c6/0x340 [ 2002.165951][ T2795] __x64_sys_openat+0x175/0x210 [ 2002.170794][ T2795] ? __ia32_sys_open+0x1e0/0x1e0 [ 2002.175730][ T2795] ? ksys_write+0x1a7/0x250 [ 2002.180241][ T2795] ? syscall_enter_from_user_mode+0x7f/0x120 [ 2002.186207][ T2795] do_syscall_64+0x40/0x110 [ 2002.190734][ T2795] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2002.196627][ T2795] RIP: 0033:0x7fd041c7cbe9 [ 2002.201051][ T2795] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2002.220654][ T2795] RSP: 002b:00007fd04299a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2002.229045][ T2795] RAX: ffffffffffffffda RBX: 00007fd041d9bf80 RCX: 00007fd041c7cbe9 [ 2002.237008][ T2795] RDX: 0000000000410101 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 2002.244985][ T2795] RBP: 00007fd04299a120 R08: 0000000000000000 R09: 0000000000000000 [ 2002.252942][ T2795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2002.260908][ T2795] R13: 000000000000000b R14: 00007fd041d9bf80 R15: 00007fff7acdf698 [ 2002.268877][ T2795] 18:07:42 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2002.297894][ T2855] loop1: detected capacity change from 0 to 64 [ 2002.312903][ T2857] CPU: 1 PID: 2857 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2002.323238][ T2857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2002.333292][ T2857] Call Trace: [ 2002.336567][ T2857] [ 2002.339485][ T2857] dump_stack_lvl+0x125/0x1b0 [ 2002.344152][ T2857] should_fail_ex+0x496/0x5b0 [ 2002.348822][ T2857] _copy_to_user+0x30/0xb0 [ 2002.353226][ T2857] simple_read_from_buffer+0xd0/0x160 [ 2002.358587][ T2857] proc_fail_nth_read+0x1b0/0x280 [ 2002.363602][ T2857] ? proc_fault_inject_read+0x280/0x280 [ 2002.369156][ T2857] ? security_file_permission+0xdc/0x100 [ 2002.374804][ T2857] ? proc_fault_inject_read+0x280/0x280 [ 2002.380379][ T2857] vfs_read+0x1ce/0x8f0 [ 2002.384542][ T2857] ? __fdget_pos+0xe7/0x170 [ 2002.389048][ T2857] ? kernel_read+0x1b0/0x1b0 [ 2002.393641][ T2857] ? mutex_trylock+0x130/0x130 [ 2002.398406][ T2857] ? __fget_files+0x1c6/0x340 [ 2002.403071][ T2857] ksys_read+0x12f/0x250 [ 2002.407297][ T2857] ? vfs_write+0xdf0/0xdf0 [ 2002.411697][ T2857] ? syscall_enter_from_user_mode+0x7f/0x120 [ 2002.417662][ T2857] do_syscall_64+0x40/0x110 [ 2002.422152][ T2857] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2002.428039][ T2857] RIP: 0033:0x7f23a787b88c [ 2002.432465][ T2857] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2002.452081][ T2857] RSP: 002b:00007f23a864f0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2002.460490][ T2857] RAX: ffffffffffffffda RBX: 00007f23a799bf80 RCX: 00007f23a787b88c [ 2002.468463][ T2857] RDX: 000000000000000f RSI: 00007f23a864f130 RDI: 0000000000000003 [ 2002.476429][ T2857] RBP: 00007f23a864f120 R08: 0000000000000000 R09: 0000000000000000 [ 2002.484400][ T2857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 18:07:42 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x0) [ 2002.492351][ T2857] R13: 000000000000000b R14: 00007f23a799bf80 R15: 00007fffae92e7d8 [ 2002.500311][ T2857] 18:07:42 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:42 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:42 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2002.571108][ T2867] loop3: detected capacity change from 0 to 64 [ 2002.603375][ T2855] syz-executor.1: attempt to access beyond end of device [ 2002.603375][ T2855] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:42 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) [ 2002.641265][ T2855] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2002.696752][ T2855] syz-executor.1: attempt to access beyond end of device [ 2002.696752][ T2855] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2002.753223][ T2855] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2002.804886][ T28] audit: type=1800 audit(1703095662.859:2755): pid=2855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:42 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4}) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x1f, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x7}) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x2) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, 0xee01, 0x900) open(&(0x7f0000000040)='./file2\x00', 0x40100, 0x2) 18:07:42 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410102, 0x0) 18:07:42 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:42 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:42 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:42 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:43 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2002.903565][ T2982] loop3: detected capacity change from 0 to 64 18:07:43 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:43 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410103, 0x0) 18:07:43 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2003.056044][ T2992] loop3: detected capacity change from 0 to 64 18:07:43 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) [ 2003.098030][ T2994] loop1: detected capacity change from 0 to 64 18:07:43 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:43 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410104, 0x0) 18:07:43 executing program 1: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x1}}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000080)={&(0x7f0000000740)={{@host, 0x3f}, {@any, 0x3fc1}, 0x400, "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"}, 0x418, 0x100}) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/19) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:43 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:43 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:43 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 2003.373244][ T3102] loop3: detected capacity change from 0 to 64 18:07:43 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:43 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:43 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410105, 0x0) [ 2003.468040][ T3110] loop1: detected capacity change from 0 to 64 18:07:43 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:43 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:43 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410107, 0x0) [ 2003.528305][ T3110] syz-executor.1: attempt to access beyond end of device [ 2003.528305][ T3110] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2003.549979][ T3117] loop3: detected capacity change from 0 to 64 [ 2003.564501][ T3110] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:43 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2003.611209][ T3110] syz-executor.1: attempt to access beyond end of device [ 2003.611209][ T3110] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2003.673828][ T3121] loop3: detected capacity change from 0 to 64 [ 2003.680939][ T3110] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2003.701534][ T28] audit: type=1800 audit(1703095663.759:2756): pid=3110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:43 executing program 1: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x1}}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000080)={&(0x7f0000000740)={{@host, 0x3f}, {@any, 0x3fc1}, 0x400, "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"}, 0x418, 0x100}) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/19) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x1}}) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) (async) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000080)={&(0x7f0000000740)={{@host, 0x3f}, {@any, 0x3fc1}, 0x400, "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"}, 0x418, 0x100}) (async) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/19) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) 18:07:43 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 2003.721429][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:43 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:43 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:43 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410109, 0x0) 18:07:43 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:43 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 2003.931167][ T3134] loop1: detected capacity change from 0 to 64 [ 2003.943344][ T3138] loop3: detected capacity change from 0 to 64 18:07:44 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x9, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:44 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410110, 0x0) [ 2003.972348][ T3134] syz-executor.1: attempt to access beyond end of device [ 2003.972348][ T3134] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:44 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2004.022135][ T3134] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2004.055945][ T3134] syz-executor.1: attempt to access beyond end of device [ 2004.055945][ T3134] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:44 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2004.100961][ T3134] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2004.155142][ T3173] loop3: detected capacity change from 0 to 64 [ 2004.162452][ T28] audit: type=1800 audit(1703095664.209:2757): pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:44 executing program 1: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x1}}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000080)={&(0x7f0000000740)={{@host, 0x3f}, {@any, 0x3fc1}, 0x400, "1962fc358377a7d56ac80ce3a5da5ad757e9b7b176bd8d0e5ee695c2ea1a5d27d95555a54e64767c6b9ec8c6fa065be5c10fbc1564b27c9e3a36c4b88c662b50bb2d23d1e689bf7fbb29e804778b10cc37b74444b69f63a4d414f2e57f6d0655aec4d09f531fee214e700b8a7d6272be530072ee16ab5e018961548fd980d90d1b8c9ca917f6d35b01700c0c4bc165550245d068c0f178280ae168efc334ffa5d95a2b3656e14e4f74709deb0707d689d8022cf17b54d442f9bda471d858a5357cab4329b8a9366ceb5e3c63ceb282e88e9a851ba8db2e94cb90e9412d84b9bcf6af92cc6fd4555cf133fae772f5ed10efff88437af4c23284838e9c00fd957f1a997256bbda7d0ecb840285242dcc510d76be9aee0db1bcef028f86bf0efacbf75c77027f4debbb475a0b661486be3fac43b7599254825313c647eee948bd1004108c674be3b064436bbe595531b189eac21ee0906fbfa7521ac4d57ad2221d540a22d03a1d548f7c3b28215e340500b79c8da77728370efab375f9358239e8017d645b68bcb88c5a4ec125773af8eaa6e54bae8c7cada822d808348e68659d9b0895d778d95b6002962d15dbde4a6b46eb6ba2c5754708febd974b6558b2b85d0979eca7c76ad5e13d956130e9f1dbaa0730d9ddb99d7a1a407b749ba606587460851950aa6c5e9fff178e6c5ed908eae46562215b61e3e80170de8281fe22cf213c0b9399d7308be8a51e34a3719f586a82ea75b35199dd509c399ad98f96b352af578a6e47b2eb2825d53d6fcb063bd578d5ee7a10a1001fbddb3f252bfde79fd47816dcffeafd5252f56ca05fb37965b60fb151fb8235d4b9c8bce796cbebe6f8a25737442a705ffe69b0d5aa7a070cbb988dc82cb27612fd133bbb5cdf560c42db0beda4a2acc2796f009067fbf8bd92c80de55af3c21f064d8ca38ab418cab631374cfb69d20adc80c09e349c54df4d4b76db7e3075f47bac82e234f82f178bbec2b39795790a4714aed81705b8d0f7909806c8f43636cd6ee20af70d6747b147cfb1159fea264cc63500fb099d45c8460bc8d3774007efdac36c04b363151abc436fabd55485ed77e6590ad725fb13b75f67dbd1ed2f597e77d9d9ee4a9b943a94ab203df81ab46aec1dc21d30386e5733b8031343d46a5259f72bc1b6cea1e7aa44d701d5fb062fd12c351afc6fe34e6cd80e846e8cef53f20120794decbc71e92e5fc707385addf68839a342aa81e6af08f4332c00e5bd77aaa0a2d67e0e3ae67883740d82781299fafb08220e66d4308d40b768f4b163b8bda06c0c8425deabbd499e5e81785c7f3e2d757637aa46a1f7f34e8396e05753e3bc89a777af8769cb6afa6b9e15dae188e3eb95bdbe02e6f9c19249ee047d96e7c119831c2b604c51922343f75c45a8dbf59df2b3f53dc37d5a3777f35bda2f9a9d96"}, 0x418, 0x100}) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/19) (async) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/19) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:44 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:44 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x2) 18:07:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:44 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xf, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:44 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) 18:07:44 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 2004.371602][ T3255] loop3: detected capacity change from 0 to 64 18:07:44 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x3) 18:07:44 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2004.460263][ T3259] loop1: detected capacity change from 0 to 64 18:07:44 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) 18:07:44 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:44 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:44 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file2\x00', 0x0, 0x8}, 0x18) 18:07:44 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:44 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) [ 2004.677706][ T3358] loop3: detected capacity change from 0 to 64 18:07:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:44 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:44 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x4) 18:07:44 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:44 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x600, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:44 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 2004.894003][ T3388] loop3: detected capacity change from 0 to 64 [ 2004.894053][ T3387] loop1: detected capacity change from 0 to 64 18:07:45 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:45 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) [ 2004.941967][ T3387] syz-executor.1: attempt to access beyond end of device [ 2004.941967][ T3387] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2004.965597][ T3387] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:45 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x5) [ 2005.004110][ T3387] syz-executor.1: attempt to access beyond end of device [ 2005.004110][ T3387] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2005.021899][ T3387] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2005.056863][ T28] audit: type=1800 audit(1703095665.099:2758): pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 2005.116292][ T3414] loop3: detected capacity change from 0 to 64 18:07:45 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:45 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:45 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:45 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x6) 18:07:45 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file2\x00', 0x0, 0x8}, 0x18) 18:07:45 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x900, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:45 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:45 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) [ 2005.307941][ T3511] loop3: detected capacity change from 0 to 64 [ 2005.319951][ T3510] loop1: detected capacity change from 0 to 64 18:07:45 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xf00, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:45 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:45 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file2\x00', 0x0, 0x8}, 0x18) 18:07:45 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x192d, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:45 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x7) 18:07:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:45 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x2d19, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:45 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:45 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2005.630539][ T3626] loop1: detected capacity change from 0 to 64 [ 2005.654165][ T3630] loop3: detected capacity change from 0 to 64 18:07:45 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x9) 18:07:45 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:45 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:45 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2005.823958][ T3729] loop3: detected capacity change from 0 to 64 18:07:45 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xa) 18:07:46 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2080060, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1, 0x1c9, &(0x7f0000000500)="$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") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000280)="5ccdfafe7f100540fd8c1ebc18305432d6d221c1e0b0435ea1f72f0c445669c23fc7c8ecfaea46b51f0fe654845d068705b41142135a27346e95eec900c54946f828f8b8cf461461f990ad3cb7aaec2ee6418a8bf6ebddd1aedcfe5d275742ad82aa6ea173391b03e5ceeb6d1e9714decefc93465d4410f51065946d23324c186112f9c3207eab13b344e0d2436534316a5990aeac4d10d63e538ac83267555b6071da82639286bf66c51aa7b450aaa15e495b748a860aa88964981b134e6922e794668b4c3e7daf8bb288a4587d8f529f463b530343d9bf9c518de5df4c0219b35aa88b92acfe5b") write$binfmt_misc(r1, &(0x7f0000000180)={'syz0', "cc8642b8a282a7d3848b9bd9b191e1e26ebcaaace1d39eab953ae0f470d60051c188e7c0103adbee64c6263259a05eb334bf7aaad0f0e40a028c7aa36a0eeb46ed6509c8ca6472a5830f8f626b5246582fee49ed17090013854db2dd0dd0cebe7d92ea8c431fa6e7abf7b26525009641a304f9147395abf3aae87e4f588fe4583ec5bf380d1fef0a9e9fcaad03cbdb7b1bff0e7aabd96949734d268c2e7f594da29b49dcb56759a6707421963af26a9c8b5ae1826087f10589a13a7dfe6168a6e277323f004fd2d195ab0f8d1766e13cdd713433a424ae954be9ce20e7c5e5ccd73901eda5"}, 0xe9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:46 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:46 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) [ 2005.995312][ T3745] loop3: detected capacity change from 0 to 64 [ 2006.067082][ T3749] loop1: detected capacity change from 0 to 64 18:07:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:46 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:46 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xf000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:46 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xc) 18:07:46 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 18:07:46 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2080060, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1, 0x1c9, &(0x7f0000000500)="$eJzs28GK00Acx/HfJN1ssyqIqx7EgyCIF7e7K1S9rQ/gQyxrLMVWivXSItjiycfwMXwUT54FPXgTBCOJmdg20dbQJm33+zks8+8vk0nCZnYStgJwbp3oloyMvKi4Wb/8Zt9kN/IrODAAKxdKeifpZ1iEp0LdAKwJ9/v/doimDQCb7+tjqSfpy7fXZ3K9zPogyk9s7uxm87F0o5bkpj75qPD2UzRRvJfuyE/yvdz+e3b/5sJkNLL53dt2/Iu6VLPxFe0n+dO0//U5q50nC66KAADYbkYHs/XUB46etTvBYVrvxPVRWntxfWyLpL6f5rtxfXDmrPAcABTjTN3/Hz9/2FE8C1juzP1fm7n/AWyu/mD4/LTTCV7+vRE99OdG42QayERmJP1jh9U2/IU29pPzclVoLCfvshRp/AjnbWOWf6FCV1rylY/+oqzJL8AaNIyxn9TjhkneapUyupsX+ZnRK52WAJSg8arba/QHw3vt7mkraAUvmsfN5qPDhw+OGvHCP/75+1W8xX8DAVvizzKg6iMBAAAAAAAAAAAAAABFXdW1qg8BAAAAQEnK+MJT1ecIAAAAAAAAAAAAAAAAAMC2+RUAAP//P3MMVA==") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000280)="5ccdfafe7f100540fd8c1ebc18305432d6d221c1e0b0435ea1f72f0c445669c23fc7c8ecfaea46b51f0fe654845d068705b41142135a27346e95eec900c54946f828f8b8cf461461f990ad3cb7aaec2ee6418a8bf6ebddd1aedcfe5d275742ad82aa6ea173391b03e5ceeb6d1e9714decefc93465d4410f51065946d23324c186112f9c3207eab13b344e0d2436534316a5990aeac4d10d63e538ac83267555b6071da82639286bf66c51aa7b450aaa15e495b748a860aa88964981b134e6922e794668b4c3e7daf8bb288a4587d8f529f463b530343d9bf9c518de5df4c0219b35aa88b92acfe5b") write$binfmt_misc(r1, &(0x7f0000000180)={'syz0', "cc8642b8a282a7d3848b9bd9b191e1e26ebcaaace1d39eab953ae0f470d60051c188e7c0103adbee64c6263259a05eb334bf7aaad0f0e40a028c7aa36a0eeb46ed6509c8ca6472a5830f8f626b5246582fee49ed17090013854db2dd0dd0cebe7d92ea8c431fa6e7abf7b26525009641a304f9147395abf3aae87e4f588fe4583ec5bf380d1fef0a9e9fcaad03cbdb7b1bff0e7aabd96949734d268c2e7f594da29b49dcb56759a6707421963af26a9c8b5ae1826087f10589a13a7dfe6168a6e277323f004fd2d195ab0f8d1766e13cdd713433a424ae954be9ce20e7c5e5ccd73901eda5"}, 0xe9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:46 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:46 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 18:07:46 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x30000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2006.217305][ T3756] loop3: detected capacity change from 0 to 64 [ 2006.254947][ T3761] loop1: detected capacity change from 0 to 64 18:07:46 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) 18:07:46 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x34000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:46 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xd) [ 2006.473119][ T3874] loop3: detected capacity change from 0 to 64 18:07:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:46 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2080060, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x1, 0x1c9, &(0x7f0000000500)="$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") (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000280)="5ccdfafe7f100540fd8c1ebc18305432d6d221c1e0b0435ea1f72f0c445669c23fc7c8ecfaea46b51f0fe654845d068705b41142135a27346e95eec900c54946f828f8b8cf461461f990ad3cb7aaec2ee6418a8bf6ebddd1aedcfe5d275742ad82aa6ea173391b03e5ceeb6d1e9714decefc93465d4410f51065946d23324c186112f9c3207eab13b344e0d2436534316a5990aeac4d10d63e538ac83267555b6071da82639286bf66c51aa7b450aaa15e495b748a860aa88964981b134e6922e794668b4c3e7daf8bb288a4587d8f529f463b530343d9bf9c518de5df4c0219b35aa88b92acfe5b") (async) write$binfmt_misc(r1, &(0x7f0000000180)={'syz0', "cc8642b8a282a7d3848b9bd9b191e1e26ebcaaace1d39eab953ae0f470d60051c188e7c0103adbee64c6263259a05eb334bf7aaad0f0e40a028c7aa36a0eeb46ed6509c8ca6472a5830f8f626b5246582fee49ed17090013854db2dd0dd0cebe7d92ea8c431fa6e7abf7b26525009641a304f9147395abf3aae87e4f588fe4583ec5bf380d1fef0a9e9fcaad03cbdb7b1bff0e7aabd96949734d268c2e7f594da29b49dcb56759a6707421963af26a9c8b5ae1826087f10589a13a7dfe6168a6e277323f004fd2d195ab0f8d1766e13cdd713433a424ae954be9ce20e7c5e5ccd73901eda5"}, 0xe9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:46 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) 18:07:46 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x400300, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:46 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) 18:07:46 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xf) 18:07:46 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xf0ffff, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:46 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) 18:07:46 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x10) [ 2006.673867][ T3883] loop1: detected capacity change from 0 to 64 [ 2006.687853][ T3885] loop3: detected capacity change from 0 to 64 18:07:46 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) 18:07:46 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) [ 2006.811355][ T3928] loop3: detected capacity change from 0 to 64 18:07:47 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:47 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x11) 18:07:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x1000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:47 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x6, 0x80, "35b4a319e594fd6867cc30fe05ea6e973116aa5abb5c9df60d54421a9135075d3a657427b1de6ccef2b49dad5fcdec5a7978dfa7ef38944547ee58f0f7f6e7", 0x35}, 0x60) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x144, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0xf8, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x6, 0x1, '-\xfd'}, {0x8, 0x1, '-(:}'}, {0x5, 0x1, '\x00'}, {0x10, 0x1, '*\',}(\\}/,-+-'}, {0xb, 0x1, 'vxcan0\x00'}, {0x6, 0x1, '\\{'}, {0x9, 0x1, '-:-,/'}, {0xb, 0x1, 'vxcan0\x00'}, {0x8, 0x1, '-O%.'}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '@'}, {0x5, 0x1, '@'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '/'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '^'}, {0xb, 0x1, 'vxcan0\x00'}]}, {0x4}, {0x54, 0x0, 0x0, 0x1, [{0x4}, {0xd, 0x1, ')]\\$&}&/#'}, {0x7, 0x1, '$..'}, {0x8, 0x1, '%-.#'}, {0x6, 0x1, '[}'}, {0x5, 0x1, '$'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '@*@'}, {0xb, 0x1, 'vxcan0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x28, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x4}, {0x6, 0x1, '%{'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x144}}, 0x4080) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, r2, 0xffffffffffffffff, 0x1, 0x3f, 0x7, "061c7a57621d41e11124d5cd2f611072773f798b474b92dcd7173804f8c5689e4cd41e9033b50f4dc37b6b166b328781c77465223040bf9518c74e69667cee", 0x2a}, 0x60) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x202c006, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:47 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:47 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 18:07:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2007.115716][ T4003] loop1: detected capacity change from 0 to 64 [ 2007.133342][ T4006] loop3: detected capacity change from 0 to 64 18:07:47 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x18) 18:07:47 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) 18:07:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x3000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:47 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:47 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x6, 0x80, "35b4a319e594fd6867cc30fe05ea6e973116aa5abb5c9df60d54421a9135075d3a657427b1de6ccef2b49dad5fcdec5a7978dfa7ef38944547ee58f0f7f6e7", 0x35}, 0x60) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x144, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0xf8, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x6, 0x1, '-\xfd'}, {0x8, 0x1, '-(:}'}, {0x5, 0x1, '\x00'}, {0x10, 0x1, '*\',}(\\}/,-+-'}, {0xb, 0x1, 'vxcan0\x00'}, {0x6, 0x1, '\\{'}, {0x9, 0x1, '-:-,/'}, {0xb, 0x1, 'vxcan0\x00'}, {0x8, 0x1, '-O%.'}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '@'}, {0x5, 0x1, '@'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '/'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '^'}, {0xb, 0x1, 'vxcan0\x00'}]}, {0x4}, {0x54, 0x0, 0x0, 0x1, [{0x4}, {0xd, 0x1, ')]\\$&}&/#'}, {0x7, 0x1, '$..'}, {0x8, 0x1, '%-.#'}, {0x6, 0x1, '[}'}, {0x5, 0x1, '$'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '@*@'}, {0xb, 0x1, 'vxcan0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x28, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x4}, {0x6, 0x1, '%{'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x144}}, 0x4080) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, r2, 0xffffffffffffffff, 0x1, 0x3f, 0x7, "061c7a57621d41e11124d5cd2f611072773f798b474b92dcd7173804f8c5689e4cd41e9033b50f4dc37b6b166b328781c77465223040bf9518c74e69667cee", 0x2a}, 0x60) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x202c006, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:47 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r3}) 18:07:47 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x4000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2007.362092][ T4064] loop3: detected capacity change from 0 to 64 18:07:47 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xf0) 18:07:47 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x6, 0x80, "35b4a319e594fd6867cc30fe05ea6e973116aa5abb5c9df60d54421a9135075d3a657427b1de6ccef2b49dad5fcdec5a7978dfa7ef38944547ee58f0f7f6e7", 0x35}, 0x60) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x144, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0xf8, 0x13, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [{0x6, 0x1, '-\xfd'}, {0x8, 0x1, '-(:}'}, {0x5, 0x1, '\x00'}, {0x10, 0x1, '*\',}(\\}/,-+-'}, {0xb, 0x1, 'vxcan0\x00'}, {0x6, 0x1, '\\{'}, {0x9, 0x1, '-:-,/'}, {0xb, 0x1, 'vxcan0\x00'}, {0x8, 0x1, '-O%.'}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '@'}, {0x5, 0x1, '@'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '/'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '^'}, {0xb, 0x1, 'vxcan0\x00'}]}, {0x4}, {0x54, 0x0, 0x0, 0x1, [{0x4}, {0xd, 0x1, ')]\\$&}&/#'}, {0x7, 0x1, '$..'}, {0x8, 0x1, '%-.#'}, {0x6, 0x1, '[}'}, {0x5, 0x1, '$'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, '@*@'}, {0xb, 0x1, 'vxcan0\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x28, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x4}, {0x6, 0x1, '%{'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x144}}, 0x4080) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, r2, 0xffffffffffffffff, 0x1, 0x3f, 0x7, "061c7a57621d41e11124d5cd2f611072773f798b474b92dcd7173804f8c5689e4cd41e9033b50f4dc37b6b166b328781c77465223040bf9518c74e69667cee", 0x2a}, 0x60) (async) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, r2, 0xffffffffffffffff, 0x1, 0x3f, 0x7, "061c7a57621d41e11124d5cd2f611072773f798b474b92dcd7173804f8c5689e4cd41e9033b50f4dc37b6b166b328781c77465223040bf9518c74e69667cee", 0x2a}, 0x60) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x202c006, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:47 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:47 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x5000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2007.527627][ T4134] loop3: detected capacity change from 0 to 64 18:07:47 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:47 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x300) 18:07:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x6000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2007.794096][ T4246] loop3: detected capacity change from 0 to 64 18:07:47 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 1) 18:07:47 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x90, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x450}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040004) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:47 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 18:07:47 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x500) 18:07:47 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x7000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2007.897317][ T4251] FAULT_INJECTION: forcing a failure. [ 2007.897317][ T4251] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.957155][ T4251] CPU: 1 PID: 4251 Comm: syz-executor.4 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2007.967492][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2007.977533][ T4251] Call Trace: [ 2007.980805][ T4251] [ 2007.983738][ T4251] dump_stack_lvl+0x125/0x1b0 [ 2007.988407][ T4251] should_fail_ex+0x496/0x5b0 [ 2007.993087][ T4251] should_failslab+0x9/0x20 [ 2007.997614][ T4251] __kmem_cache_alloc_node+0x6b/0x310 [ 2008.002972][ T4251] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2008.008688][ T4251] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2008.014414][ T4251] __kmalloc+0x49/0x90 [ 2008.018471][ T4251] tomoyo_realpath_from_path+0xb9/0x710 [ 2008.024003][ T4251] ? tomoyo_profile+0x47/0x60 [ 2008.028669][ T4251] tomoyo_path_number_perm+0x241/0x580 [ 2008.034110][ T4251] ? tomoyo_path_number_perm+0x22e/0x580 [ 2008.039725][ T4251] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2008.045522][ T4251] ? __fget_files+0x1c1/0x340 [ 2008.050180][ T4251] ? reacquire_held_locks+0x4c0/0x4c0 [ 2008.055547][ T4251] security_file_ioctl+0x72/0xb0 [ 2008.060469][ T4251] __x64_sys_ioctl+0xbb/0x210 [ 2008.065127][ T4251] do_syscall_64+0x40/0x110 [ 2008.069617][ T4251] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2008.075487][ T4251] RIP: 0033:0x7f3cb327cbe9 [ 2008.079877][ T4251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2008.099460][ T4251] RSP: 002b:00007f3cb403a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2008.107851][ T4251] RAX: ffffffffffffffda RBX: 00007f3cb339bf80 RCX: 00007f3cb327cbe9 [ 2008.115797][ T4251] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000003 [ 2008.123751][ T4251] RBP: 00007f3cb403a120 R08: 0000000000000000 R09: 0000000000000000 [ 2008.131702][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2008.139650][ T4251] R13: 000000000000000b R14: 00007f3cb339bf80 R15: 00007ffd1ffd8558 [ 2008.147606][ T4251] 18:07:48 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) [ 2008.155750][ T4261] loop3: detected capacity change from 0 to 64 [ 2008.173628][ T4256] loop1: detected capacity change from 0 to 64 [ 2008.186544][ T4251] ERROR: Out of memory at tomoyo_realpath_from_path. 18:07:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:48 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2008.211257][ T4256] syz-executor.1: attempt to access beyond end of device [ 2008.211257][ T4256] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:48 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) 18:07:48 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 2) [ 2008.257448][ T4256] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:48 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x600) [ 2008.346066][ T4256] syz-executor.1: attempt to access beyond end of device [ 2008.346066][ T4256] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2008.370142][ T4256] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:48 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xf000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:48 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x90, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x450}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040004) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x90, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x450}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040004) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) 18:07:48 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) [ 2008.392572][ T28] audit: type=1800 audit(1703095668.439:2759): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 2008.401385][ T4273] loop3: detected capacity change from 0 to 64 18:07:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:48 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) 18:07:48 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x700) [ 2008.518954][ T4274] FAULT_INJECTION: forcing a failure. [ 2008.518954][ T4274] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.537528][ T4282] loop1: detected capacity change from 0 to 64 [ 2008.577007][ T4274] CPU: 0 PID: 4274 Comm: syz-executor.4 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2008.583226][ T4282] syz-executor.1: attempt to access beyond end of device [ 2008.583226][ T4282] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2008.587340][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2008.587352][ T4274] Call Trace: [ 2008.587359][ T4274] [ 2008.587367][ T4274] dump_stack_lvl+0x125/0x1b0 [ 2008.587395][ T4274] should_fail_ex+0x496/0x5b0 [ 2008.587425][ T4274] should_failslab+0x9/0x20 [ 2008.587451][ T4274] __kmem_cache_alloc_node+0x6b/0x310 [ 2008.616353][ T4282] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2008.617089][ T4274] ? tomoyo_encode2+0x100/0x3d0 [ 2008.617119][ T4274] ? tomoyo_encode2+0x100/0x3d0 [ 2008.617142][ T4274] __kmalloc+0x49/0x90 [ 2008.617169][ T4274] tomoyo_encode2+0x100/0x3d0 [ 2008.617195][ T4274] tomoyo_encode+0x29/0x50 [ 2008.617215][ T4274] tomoyo_realpath_from_path+0x196/0x710 [ 2008.617244][ T4274] tomoyo_path_number_perm+0x241/0x580 [ 2008.617264][ T4274] ? tomoyo_path_number_perm+0x22e/0x580 [ 2008.617286][ T4274] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2008.617329][ T4274] ? __fget_files+0x1c1/0x340 [ 2008.617348][ T4274] ? reacquire_held_locks+0x4c0/0x4c0 [ 2008.635632][ T4282] syz-executor.1: attempt to access beyond end of device [ 2008.635632][ T4282] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2008.636517][ T4274] security_file_ioctl+0x72/0xb0 [ 2008.636552][ T4274] __x64_sys_ioctl+0xbb/0x210 [ 2008.636585][ T4274] do_syscall_64+0x40/0x110 [ 2008.636609][ T4274] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2008.636629][ T4274] RIP: 0033:0x7f3cb327cbe9 [ 2008.636644][ T4274] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2008.636661][ T4274] RSP: 002b:00007f3cb403a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2008.636680][ T4274] RAX: ffffffffffffffda RBX: 00007f3cb339bf80 RCX: 00007f3cb327cbe9 [ 2008.636693][ T4274] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000004 [ 2008.636704][ T4274] RBP: 00007f3cb403a120 R08: 0000000000000000 R09: 0000000000000000 [ 2008.636716][ T4274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2008.636727][ T4274] R13: 000000000000000b R14: 00007f3cb339bf80 R15: 00007ffd1ffd8558 [ 2008.636757][ T4274] [ 2008.646758][ T4282] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2008.649651][ C0] vkms_vblank_simulate: vblank timer overrun [ 2008.822401][ C0] vkms_vblank_simulate: vblank timer overrun [ 2008.849067][ T4274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2008.868610][ T4293] loop3: detected capacity change from 0 to 64 18:07:49 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x900) 18:07:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:49 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)) 18:07:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x192d0000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:49 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 3) [ 2008.969787][ T28] audit: type=1800 audit(1703095668.909:2760): pid=4282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x3f000000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2009.016020][ T4306] FAULT_INJECTION: forcing a failure. [ 2009.016020][ T4306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2009.057323][ T4306] CPU: 0 PID: 4306 Comm: syz-executor.4 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2009.067679][ T4306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2009.077748][ T4306] Call Trace: [ 2009.081022][ T4306] [ 2009.083956][ T4306] dump_stack_lvl+0x125/0x1b0 [ 2009.088635][ T4306] should_fail_ex+0x496/0x5b0 [ 2009.093336][ T4306] _copy_from_user+0x30/0xf0 [ 2009.097936][ T4306] drm_ioctl+0x4fd/0xbf0 [ 2009.102170][ T4306] ? drm_prime_destroy_file_private+0x60/0x60 [ 2009.108228][ T4306] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2009.113239][ T4306] ? reacquire_held_locks+0x4c0/0x4c0 [ 2009.118610][ T4306] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2009.123527][ T4306] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2009.128535][ T4306] __x64_sys_ioctl+0x18f/0x210 [ 2009.133287][ T4306] do_syscall_64+0x40/0x110 [ 2009.137774][ T4306] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2009.143647][ T4306] RIP: 0033:0x7f3cb327cbe9 [ 2009.148043][ T4306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2009.167633][ T4306] RSP: 002b:00007f3cb403a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2009.176022][ T4306] RAX: ffffffffffffffda RBX: 00007f3cb339bf80 RCX: 00007f3cb327cbe9 [ 2009.183971][ T4306] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000003 [ 2009.191921][ T4306] RBP: 00007f3cb403a120 R08: 0000000000000000 R09: 0000000000000000 [ 2009.199870][ T4306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2009.207832][ T4306] R13: 000000000000000b R14: 00007f3cb339bf80 R15: 00007ffd1ffd8558 [ 2009.215794][ T4306] [ 2009.218879][ C0] vkms_vblank_simulate: vblank timer overrun [ 2009.238187][ T4316] loop3: detected capacity change from 0 to 64 18:07:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x9effffff, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:49 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x90, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x450}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040004) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:49 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 1) 18:07:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xf0ffffff, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:49 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xa00) [ 2009.427072][ T4409] FAULT_INJECTION: forcing a failure. [ 2009.427072][ T4409] name failslab, interval 1, probability 0, space 0, times 0 [ 2009.446019][ T4409] CPU: 0 PID: 4409 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2009.456366][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2009.466403][ T4409] Call Trace: [ 2009.469667][ T4409] [ 2009.472583][ T4409] dump_stack_lvl+0x125/0x1b0 [ 2009.477255][ T4409] should_fail_ex+0x496/0x5b0 [ 2009.481922][ T4409] should_failslab+0x9/0x20 [ 2009.486416][ T4409] __kmem_cache_alloc_node+0x6b/0x310 [ 2009.491785][ T4409] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2009.497503][ T4409] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2009.503215][ T4409] __kmalloc+0x49/0x90 [ 2009.507292][ T4409] tomoyo_realpath_from_path+0xb9/0x710 [ 2009.512833][ T4409] ? tomoyo_profile+0x47/0x60 [ 2009.517509][ T4409] tomoyo_path_number_perm+0x241/0x580 [ 2009.522962][ T4409] ? tomoyo_path_number_perm+0x22e/0x580 [ 2009.528597][ T4409] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2009.534412][ T4409] ? __fget_files+0x1c1/0x340 [ 2009.539078][ T4409] ? reacquire_held_locks+0x4c0/0x4c0 [ 2009.544462][ T4409] security_file_ioctl+0x72/0xb0 [ 2009.549401][ T4409] __x64_sys_ioctl+0xbb/0x210 [ 2009.554077][ T4409] do_syscall_64+0x40/0x110 [ 2009.558580][ T4409] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2009.564463][ T4409] RIP: 0033:0x7f98faa7cbe9 [ 2009.568866][ T4409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2009.588464][ T4409] RSP: 002b:00007f98fb7fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2009.596868][ T4409] RAX: ffffffffffffffda RBX: 00007f98fab9bf80 RCX: 00007f98faa7cbe9 [ 2009.604827][ T4409] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000003 [ 2009.612788][ T4409] RBP: 00007f98fb7fc120 R08: 0000000000000000 R09: 0000000000000000 [ 2009.620748][ T4409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2009.628706][ T4409] R13: 000000000000000b R14: 00007f98fab9bf80 R15: 00007ffdca04d088 [ 2009.636676][ T4409] [ 2009.639803][ C0] vkms_vblank_simulate: vblank timer overrun [ 2009.652334][ T4411] loop3: detected capacity change from 0 to 64 18:07:49 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 4) 18:07:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xfffff000, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xffffff7f, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:49 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xc00) [ 2009.771828][ T4415] FAULT_INJECTION: forcing a failure. [ 2009.771828][ T4415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2009.773831][ T4419] loop1: detected capacity change from 0 to 64 [ 2009.785960][ T4409] ERROR: Out of memory at tomoyo_realpath_from_path. 18:07:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xffffff9e, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2009.812411][ T4415] CPU: 1 PID: 4415 Comm: syz-executor.4 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2009.822749][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2009.832817][ T4415] Call Trace: [ 2009.836097][ T4415] [ 2009.839023][ T4415] dump_stack_lvl+0x125/0x1b0 [ 2009.843697][ T4415] should_fail_ex+0x496/0x5b0 [ 2009.849073][ T4415] _copy_to_user+0x30/0xb0 [ 2009.853483][ T4415] drm_ioctl+0x5f3/0xbf0 [ 2009.857723][ T4415] ? drm_prime_destroy_file_private+0x60/0x60 [ 2009.863781][ T4415] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2009.868805][ T4415] ? reacquire_held_locks+0x4c0/0x4c0 [ 2009.874182][ T4415] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2009.879107][ T4415] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2009.884122][ T4415] __x64_sys_ioctl+0x18f/0x210 [ 2009.888977][ T4415] do_syscall_64+0x40/0x110 [ 2009.893490][ T4415] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2009.899367][ T4415] RIP: 0033:0x7f3cb327cbe9 [ 2009.903765][ T4415] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2009.923364][ T4415] RSP: 002b:00007f3cb403a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2009.931765][ T4415] RAX: ffffffffffffffda RBX: 00007f3cb339bf80 RCX: 00007f3cb327cbe9 [ 2009.939724][ T4415] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000003 [ 2009.947682][ T4415] RBP: 00007f3cb403a120 R08: 0000000000000000 R09: 0000000000000000 [ 2009.955639][ T4415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2009.963683][ T4415] R13: 000000000000000b R14: 00007f3cb339bf80 R15: 00007ffd1ffd8558 18:07:50 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xfffffff0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2009.971649][ T4415] [ 2009.987460][ T4436] loop3: detected capacity change from 0 to 64 18:07:50 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 5) [ 2010.117466][ T4474] FAULT_INJECTION: forcing a failure. [ 2010.117466][ T4474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.133926][ T4474] CPU: 0 PID: 4474 Comm: syz-executor.4 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2010.144273][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2010.154333][ T4474] Call Trace: [ 2010.157613][ T4474] [ 2010.160535][ T4474] dump_stack_lvl+0x125/0x1b0 [ 2010.165218][ T4474] should_fail_ex+0x496/0x5b0 [ 2010.169895][ T4474] _copy_to_user+0x30/0xb0 [ 2010.174315][ T4474] simple_read_from_buffer+0xd0/0x160 [ 2010.179687][ T4474] proc_fail_nth_read+0x1b0/0x280 [ 2010.184701][ T4474] ? proc_fault_inject_read+0x280/0x280 [ 2010.190248][ T4474] ? security_file_permission+0xdc/0x100 [ 2010.195868][ T4474] ? proc_fault_inject_read+0x280/0x280 [ 2010.201399][ T4474] vfs_read+0x1ce/0x8f0 [ 2010.205537][ T4474] ? __fdget_pos+0xe7/0x170 [ 2010.210025][ T4474] ? kernel_read+0x1b0/0x1b0 [ 2010.214592][ T4474] ? mutex_trylock+0x130/0x130 [ 2010.219335][ T4474] ? drm_prime_destroy_file_private+0x60/0x60 [ 2010.225384][ T4474] ? __fget_files+0x1c6/0x340 [ 2010.230067][ T4474] ksys_read+0x12f/0x250 [ 2010.234291][ T4474] ? vfs_write+0xdf0/0xdf0 [ 2010.238688][ T4474] ? syscall_enter_from_user_mode+0x7f/0x120 [ 2010.244648][ T4474] do_syscall_64+0x40/0x110 [ 2010.249135][ T4474] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2010.255017][ T4474] RIP: 0033:0x7f3cb327b88c [ 2010.259427][ T4474] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2010.279024][ T4474] RSP: 002b:00007f3cb403a0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2010.287426][ T4474] RAX: ffffffffffffffda RBX: 00007f3cb339bf80 RCX: 00007f3cb327b88c [ 2010.295382][ T4474] RDX: 000000000000000f RSI: 00007f3cb403a130 RDI: 0000000000000005 [ 2010.303338][ T4474] RBP: 00007f3cb403a120 R08: 0000000000000000 R09: 0000000000000000 [ 2010.311332][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2010.319299][ T4474] R13: 000000000000000b R14: 00007f3cb339bf80 R15: 00007ffd1ffd8558 [ 2010.327278][ T4474] [ 2010.330322][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:50 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0xffffffff, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:50 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xd00) 18:07:50 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 2) 18:07:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:50 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:50 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x2000004, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES8=r2], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) [ 2010.447812][ T4550] loop3: detected capacity change from 0 to 64 18:07:50 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x9, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:50 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xf00) [ 2010.508844][ T4552] FAULT_INJECTION: forcing a failure. [ 2010.508844][ T4552] name failslab, interval 1, probability 0, space 0, times 0 [ 2010.558719][ T4552] CPU: 1 PID: 4552 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2010.569101][ T4552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2010.579151][ T4552] Call Trace: [ 2010.582432][ T4552] [ 2010.585360][ T4552] dump_stack_lvl+0x125/0x1b0 [ 2010.590031][ T4552] should_fail_ex+0x496/0x5b0 [ 2010.594707][ T4552] should_failslab+0x9/0x20 [ 2010.599207][ T4552] __kmem_cache_alloc_node+0x6b/0x310 [ 2010.604573][ T4552] ? tomoyo_encode2+0x100/0x3d0 [ 2010.609445][ T4552] ? tomoyo_encode2+0x100/0x3d0 [ 2010.614283][ T4552] __kmalloc+0x49/0x90 [ 2010.618356][ T4552] tomoyo_encode2+0x100/0x3d0 [ 2010.623041][ T4552] tomoyo_encode+0x29/0x50 [ 2010.627445][ T4552] tomoyo_realpath_from_path+0x196/0x710 [ 2010.633072][ T4552] tomoyo_path_number_perm+0x241/0x580 [ 2010.638517][ T4552] ? tomoyo_path_number_perm+0x22e/0x580 [ 2010.644138][ T4552] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2010.649945][ T4552] ? __fget_files+0x1c1/0x340 [ 2010.654611][ T4552] ? reacquire_held_locks+0x4c0/0x4c0 [ 2010.659995][ T4552] security_file_ioctl+0x72/0xb0 [ 2010.664944][ T4552] __x64_sys_ioctl+0xbb/0x210 [ 2010.669657][ T4552] do_syscall_64+0x40/0x110 [ 2010.674164][ T4552] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2010.680047][ T4552] RIP: 0033:0x7f98faa7cbe9 [ 2010.684452][ T4552] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2010.704054][ T4552] RSP: 002b:00007f98fb7fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2010.712458][ T4552] RAX: ffffffffffffffda RBX: 00007f98fab9bf80 RCX: 00007f98faa7cbe9 [ 2010.720428][ T4552] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000003 [ 2010.728396][ T4552] RBP: 00007f98fb7fc120 R08: 0000000000000000 R09: 0000000000000000 [ 2010.736359][ T4552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2010.744321][ T4552] R13: 000000000000000b R14: 00007f98fab9bf80 R15: 00007ffdca04d088 [ 2010.752295][ T4552] 18:07:50 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x2, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:50 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0xf, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2010.820380][ T4560] loop1: detected capacity change from 0 to 64 18:07:50 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x10, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2010.880645][ T4560] syz-executor.1: attempt to access beyond end of device [ 2010.880645][ T4560] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2010.882305][ T4566] loop3: detected capacity change from 0 to 64 [ 2010.913504][ T4560] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2010.923639][ T4560] syz-executor.1: attempt to access beyond end of device 18:07:51 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2010.923639][ T4560] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:51 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1100) [ 2011.029927][ T4560] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2011.047480][ T28] audit: type=1800 audit(1703095671.109:2761): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 2011.071481][ T4574] loop3: detected capacity change from 0 to 64 [ 2011.110868][ T4552] ERROR: Out of memory at tomoyo_realpath_from_path. 18:07:51 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 3) 18:07:51 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x2000004, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES8=r2], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) 18:07:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:51 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x541b, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:51 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1800) 18:07:51 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x140, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:51 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5421, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2011.251905][ T4585] loop3: detected capacity change from 0 to 64 18:07:51 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5450, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:51 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0xec0, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:51 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1f00) 18:07:51 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 32) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x2000004, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES8=r2], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) [ 2011.343669][ T4590] FAULT_INJECTION: forcing a failure. [ 2011.343669][ T4590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2011.402382][ T4590] CPU: 1 PID: 4590 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2011.412752][ T4590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2011.422818][ T4590] Call Trace: [ 2011.426103][ T4590] [ 2011.429028][ T4590] dump_stack_lvl+0x125/0x1b0 [ 2011.433695][ T4590] should_fail_ex+0x496/0x5b0 [ 2011.438368][ T4590] _copy_from_user+0x30/0xf0 [ 2011.442955][ T4590] drm_ioctl+0x4fd/0xbf0 [ 2011.447203][ T4590] ? drm_prime_destroy_file_private+0x60/0x60 [ 2011.453296][ T4590] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2011.458320][ T4590] ? reacquire_held_locks+0x4c0/0x4c0 [ 2011.463732][ T4590] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2011.468673][ T4590] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2011.473685][ T4590] __x64_sys_ioctl+0x18f/0x210 [ 2011.478443][ T4590] do_syscall_64+0x40/0x110 [ 2011.482937][ T4590] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2011.488815][ T4590] RIP: 0033:0x7f98faa7cbe9 [ 2011.493213][ T4590] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2011.512810][ T4590] RSP: 002b:00007f98fb7fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2011.521204][ T4590] RAX: ffffffffffffffda RBX: 00007f98fab9bf80 RCX: 00007f98faa7cbe9 [ 2011.529161][ T4590] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000003 [ 2011.537113][ T4590] RBP: 00007f98fb7fc120 R08: 0000000000000000 R09: 0000000000000000 [ 2011.545071][ T4590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 18:07:51 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x33fe0, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:51 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 4) [ 2011.553024][ T4590] R13: 000000000000000b R14: 00007f98fab9bf80 R15: 00007ffdca04d088 [ 2011.560998][ T4590] [ 2011.580133][ T4697] loop3: detected capacity change from 0 to 64 18:07:51 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5451, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:51 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x2000) 18:07:51 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0xfffffdef, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2011.705800][ T4762] FAULT_INJECTION: forcing a failure. [ 2011.705800][ T4762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2011.768870][ T4762] CPU: 0 PID: 4762 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2011.776077][ T4816] loop3: detected capacity change from 0 to 64 [ 2011.779217][ T4762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2011.779236][ T4762] Call Trace: [ 2011.779244][ T4762] [ 2011.779251][ T4762] dump_stack_lvl+0x125/0x1b0 [ 2011.779278][ T4762] should_fail_ex+0x496/0x5b0 [ 2011.779308][ T4762] _copy_to_user+0x30/0xb0 [ 2011.779330][ T4762] drm_ioctl+0x5f3/0xbf0 [ 2011.819647][ T4762] ? drm_prime_destroy_file_private+0x60/0x60 [ 2011.825712][ T4762] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2011.830732][ T4762] ? reacquire_held_locks+0x4c0/0x4c0 [ 2011.836113][ T4762] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2011.841044][ T4762] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2011.846067][ T4762] __x64_sys_ioctl+0x18f/0x210 [ 2011.850834][ T4762] do_syscall_64+0x40/0x110 [ 2011.855333][ T4762] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2011.861216][ T4762] RIP: 0033:0x7f98faa7cbe9 [ 2011.865623][ T4762] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2011.885221][ T4762] RSP: 002b:00007f98fb7fc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2011.893633][ T4762] RAX: ffffffffffffffda RBX: 00007f98fab9bf80 RCX: 00007f98faa7cbe9 [ 2011.901597][ T4762] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000003 [ 2011.909561][ T4762] RBP: 00007f98fb7fc120 R08: 0000000000000000 R09: 0000000000000000 [ 2011.917526][ T4762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2011.925488][ T4762] R13: 000000000000000b R14: 00007f98fab9bf80 R15: 00007ffdca04d088 [ 2011.933461][ T4762] [ 2011.936557][ C0] vkms_vblank_simulate: vblank timer overrun 18:07:52 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x2, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:52 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 18:07:52 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x3f00) 18:07:52 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5452, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2012.004096][ T4823] loop1: detected capacity change from 0 to 64 18:07:52 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x4, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:52 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5460, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) [ 2012.104357][ T4828] loop3: detected capacity change from 0 to 64 [ 2012.125302][ T4823] syz-executor.1: attempt to access beyond end of device [ 2012.125302][ T4823] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:52 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8933, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:52 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xf000) 18:07:52 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (fail_nth: 5) [ 2012.205428][ T4823] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:52 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x7, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:52 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x400448c9, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2012.308989][ T4823] syz-executor.1: attempt to access beyond end of device [ 2012.308989][ T4823] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:52 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x21, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2012.350347][ T4911] loop3: detected capacity change from 0 to 64 [ 2012.445968][ T4909] FAULT_INJECTION: forcing a failure. [ 2012.445968][ T4909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2012.491413][ T4823] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2012.532593][ T4909] CPU: 0 PID: 4909 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2012.542948][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2012.553016][ T4909] Call Trace: [ 2012.556304][ T4909] [ 2012.559257][ T4909] dump_stack_lvl+0x125/0x1b0 [ 2012.563961][ T4909] should_fail_ex+0x496/0x5b0 [ 2012.568660][ T4909] _copy_to_user+0x30/0xb0 [ 2012.573080][ T4909] simple_read_from_buffer+0xd0/0x160 [ 2012.578454][ T4909] proc_fail_nth_read+0x1b0/0x280 [ 2012.583490][ T4909] ? proc_fault_inject_read+0x280/0x280 [ 2012.589043][ T4909] ? security_file_permission+0xdc/0x100 [ 2012.594695][ T4909] ? proc_fault_inject_read+0x280/0x280 [ 2012.600287][ T4909] vfs_read+0x1ce/0x8f0 [ 2012.604452][ T4909] ? __fdget_pos+0xe7/0x170 [ 2012.608962][ T4909] ? kernel_read+0x1b0/0x1b0 [ 2012.613558][ T4909] ? mutex_trylock+0x130/0x130 [ 2012.618332][ T4909] ? drm_prime_destroy_file_private+0x60/0x60 [ 2012.624417][ T4909] ? __fget_files+0x1c6/0x340 [ 2012.629120][ T4909] ksys_read+0x12f/0x250 [ 2012.633378][ T4909] ? vfs_write+0xdf0/0xdf0 [ 2012.637812][ T4909] ? syscall_enter_from_user_mode+0x7f/0x120 [ 2012.643811][ T4909] do_syscall_64+0x40/0x110 [ 2012.646391][ T4967] loop3: detected capacity change from 0 to 64 [ 2012.648320][ T4909] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2012.648345][ T4909] RIP: 0033:0x7f98faa7b88c 18:07:52 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:52 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xff0f) 18:07:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:52 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x400448dd, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:52 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 18:07:52 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x2, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2012.648362][ T4909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2012.648381][ T4909] RSP: 002b:00007f98fb7fc0c0 EFLAGS: 00000246 [ 2012.666822][ T28] audit: type=1800 audit(1703095672.649:2762): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 2012.684374][ T4909] ORIG_RAX: 0000000000000000 [ 2012.684384][ T4909] RAX: ffffffffffffffda RBX: 00007f98fab9bf80 RCX: 00007f98faa7b88c [ 2012.684398][ T4909] RDX: 000000000000000f RSI: 00007f98fb7fc130 RDI: 0000000000000005 18:07:52 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x400454ca, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2012.684411][ T4909] RBP: 00007f98fb7fc120 R08: 0000000000000000 R09: 0000000000000000 [ 2012.684423][ T4909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2012.684435][ T4909] R13: 000000000000000b R14: 00007f98fab9bf80 R15: 00007ffdca04d088 [ 2012.684460][ T4909] [ 2012.684514][ C0] vkms_vblank_simulate: vblank timer overrun [ 2012.829889][ T4974] loop1: detected capacity change from 0 to 64 [ 2012.870756][ T4974] syz-executor.1: attempt to access beyond end of device [ 2012.870756][ T4974] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2012.903487][ T4974] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:53 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:53 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x100000) 18:07:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:53 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x3, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:53 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x40049409, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2012.914537][ T4974] syz-executor.1: attempt to access beyond end of device [ 2012.914537][ T4974] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:53 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x4, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2012.970428][ T4974] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2013.005433][ T4987] loop3: detected capacity change from 0 to 64 18:07:53 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x40086602, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2013.040498][ T28] audit: type=1800 audit(1703095673.099:2763): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:53 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x2, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:53 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x40186366, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:53 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') (async) 18:07:53 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x5, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:53 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1c0810) 18:07:53 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x10, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2013.257100][ T5130] loop3: detected capacity change from 0 to 64 18:07:53 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x6, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2013.392180][ T5154] loop1: detected capacity change from 0 to 64 [ 2013.445974][ T5154] syz-executor.1: attempt to access beyond end of device [ 2013.445974][ T5154] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2013.476790][ T5154] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2013.491388][ T5154] syz-executor.1: attempt to access beyond end of device [ 2013.491388][ T5154] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2013.526527][ T5154] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2013.539849][ T28] audit: type=1800 audit(1703095673.599:2764): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:53 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xf0ffff) 18:07:53 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x401c5820, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:53 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x541b, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:53 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x7, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:53 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x280000, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x103) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/178, 0xb2) 18:07:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:53 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5421, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:53 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x9, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2013.790256][ T5267] loop1: detected capacity change from 0 to 64 [ 2013.792676][ T5266] loop3: detected capacity change from 0 to 64 18:07:53 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4020940d, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:53 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x280000, 0x0) (async) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x103) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/178, 0xb2) 18:07:53 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000) 18:07:54 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xf, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:54 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5450, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:54 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2013.974202][ T5282] loop1: detected capacity change from 0 to 64 [ 2014.004558][ T5285] loop3: detected capacity change from 0 to 64 18:07:54 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x2000000) 18:07:54 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xf0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:54 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086601, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2014.219740][ T5397] loop3: detected capacity change from 0 to 64 18:07:54 executing program 1: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x280000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x280000, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x103) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/178, 0xb2) 18:07:54 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5451, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:54 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:54 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x801c581f, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:54 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x3000000) 18:07:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x20000023896) 18:07:54 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x500, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:54 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc0045878, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:54 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5452, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:54 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x600, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2014.611137][ T5403] loop1: detected capacity change from 0 to 64 [ 2014.637812][ T5411] loop3: detected capacity change from 0 to 64 18:07:54 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x4000000) 18:07:54 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc0045878, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2014.838590][ T5487] loop3: detected capacity change from 0 to 64 18:07:55 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x5460, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:55 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x700, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:55 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c64cf, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:55 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x5000000) 18:07:55 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x0, 0x4}, 0x6) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000180)='\x00', 0x2000004, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYBLOB="335bfa07e865d04a8a68869b7413a9566a67200526b8e80c4ce7f44cdaa4dbc8e45d061d0e83fbbebde2e346baaadc453892528a2202a2e014fad6d124d5b0f27956ab2d54699dab764c756776e57eb218c64c95917939f131ca8cdf383841b1046b46bdc5b41db8129be2eaf67d90d0b16df206015be1e9f864071c832c0d9f74243b875d613344122f218efe9c76a0a2c75c75656ba64955571b7a6b63ec35f1e546ef48fdc24d103d013e82748cfd4b52ce33d7d5b95fa206232a8ddb8875312cfd82b9b16976f8bb84c3f78a565a4d612bcdfac0710ac9afc212a90a456b8bd0f0e781946b95", @ANYRES16=r2, @ANYRES32=0x0], 0x1, 0x18f, &(0x7f0000000600)="$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") prctl$PR_SET_UNALIGN(0x6, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000080)={0xfffffffffffffe01, 0xfffffffffffffffd, 0x1, 0x4, 0x2, [0x8001, 0x40, 0x0, 0x93b]}) [ 2015.067119][ T5534] loop3: detected capacity change from 0 to 64 [ 2015.181210][ T5536] loop1: detected capacity change from 0 to 64 18:07:55 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8933, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:55 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc0189436, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:55 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x900, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:55 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x6000000) 18:07:55 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x0, 0x4}, 0x6) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000180)='\x00', 0x2000004, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYBLOB="335bfa07e865d04a8a68869b7413a9566a67200526b8e80c4ce7f44cdaa4dbc8e45d061d0e83fbbebde2e346baaadc453892528a2202a2e014fad6d124d5b0f27956ab2d54699dab764c756776e57eb218c64c95917939f131ca8cdf383841b1046b46bdc5b41db8129be2eaf67d90d0b16df206015be1e9f864071c832c0d9f74243b875d613344122f218efe9c76a0a2c75c75656ba64955571b7a6b63ec35f1e546ef48fdc24d103d013e82748cfd4b52ce33d7d5b95fa206232a8ddb8875312cfd82b9b16976f8bb84c3f78a565a4d612bcdfac0710ac9afc212a90a456b8bd0f0e781946b95", @ANYRES16=r2, @ANYRES32=0x0], 0x1, 0x18f, &(0x7f0000000600)="$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") prctl$PR_SET_UNALIGN(0x6, 0x1) (async) prctl$PR_SET_UNALIGN(0x6, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000080)={0xfffffffffffffe01, 0xfffffffffffffffd, 0x1, 0x4, 0x2, [0x8001, 0x40, 0x0, 0x93b]}) 18:07:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) 18:07:55 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x400448c9, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:55 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xf00, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2015.428441][ T5544] loop3: detected capacity change from 0 to 64 18:07:55 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x7000000) 18:07:55 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc020660b, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:55 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x0, 0x4}, 0x6) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000180)='\x00', 0x2000004, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYBLOB="335bfa07e865d04a8a68869b7413a9566a67200526b8e80c4ce7f44cdaa4dbc8e45d061d0e83fbbebde2e346baaadc453892528a2202a2e014fad6d124d5b0f27956ab2d54699dab764c756776e57eb218c64c95917939f131ca8cdf383841b1046b46bdc5b41db8129be2eaf67d90d0b16df206015be1e9f864071c832c0d9f74243b875d613344122f218efe9c76a0a2c75c75656ba64955571b7a6b63ec35f1e546ef48fdc24d103d013e82748cfd4b52ce33d7d5b95fa206232a8ddb8875312cfd82b9b16976f8bb84c3f78a565a4d612bcdfac0710ac9afc212a90a456b8bd0f0e781946b95", @ANYRES16=r2, @ANYRES32=0x0], 0x1, 0x18f, &(0x7f0000000600)="$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") (async, rerun: 32) prctl$PR_SET_UNALIGN(0x6, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000080)={0xfffffffffffffe01, 0xfffffffffffffffd, 0x1, 0x4, 0x2, [0x8001, 0x40, 0x0, 0x93b]}) 18:07:55 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x192d, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2015.609384][ T5659] loop3: detected capacity change from 0 to 64 18:07:55 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:55 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x9000000) 18:07:55 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x400448dd, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:55 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x2d19, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:55 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x2, r5}) [ 2015.833642][ T5742] loop3: detected capacity change from 0 to 64 18:07:56 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) 18:07:56 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x400454ca, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:56 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x3, r5}) 18:07:56 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x3f00, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:56 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xa000000) 18:07:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) 18:07:56 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x4, r5}) [ 2016.163713][ T5783] loop3: detected capacity change from 0 to 64 [ 2016.185947][ T5792] loop1: detected capacity change from 0 to 64 18:07:56 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xc000000) 18:07:56 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x40049409, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:56 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xf000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2016.230486][ T5792] syz-executor.1: attempt to access beyond end of device [ 2016.230486][ T5792] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2016.264702][ T5792] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:56 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x30000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2016.315204][ T5792] syz-executor.1: attempt to access beyond end of device [ 2016.315204][ T5792] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:56 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x5, r5}) [ 2016.373885][ T5792] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2016.374310][ T5814] loop3: detected capacity change from 0 to 64 [ 2016.429820][ T28] audit: type=1800 audit(1703095676.479:2765): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:56 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bridge0\x00'}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) 18:07:56 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x34000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:56 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x6, r5}) 18:07:56 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x40086602, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:56 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xd000000) [ 2016.684949][ T5916] loop3: detected capacity change from 0 to 64 [ 2016.819481][ T5921] loop1: detected capacity change from 0 to 64 18:07:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) 18:07:57 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x400300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:57 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bridge0\x00'}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) (rerun: 32) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) 18:07:57 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x7, r5}) 18:07:57 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x40186366, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:57 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xf000000) 18:07:57 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x300, r5}) 18:07:57 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x401c5820, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:57 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xf0ffff, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:57 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x10081c00) [ 2017.045729][ T6035] loop1: detected capacity change from 0 to 64 [ 2017.051115][ T6032] loop3: detected capacity change from 0 to 64 18:07:57 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x500, r5}) 18:07:57 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x1000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2017.247990][ T6149] loop3: detected capacity change from 0 to 64 18:07:57 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x600, r5}) 18:07:57 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4020940d, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:57 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x8, 0x4}, 0x6) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x2818080, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="e9a05c1afbad50280e02c9535895c5454f17c02a07", @ANYRESOCT, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES64=0x0, @ANYRES32=r0], 0x1, 0x17f, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x9) 18:07:57 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x11000000) 18:07:57 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x2000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) [ 2017.598108][ T6157] loop3: detected capacity change from 0 to 64 18:07:57 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x3000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:57 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x700, r5}) 18:07:57 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:57 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x18000000) [ 2017.646576][ T6161] loop1: detected capacity change from 0 to 64 18:07:57 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x4000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2017.716930][ T6161] syz-executor.1: attempt to access beyond end of device [ 2017.716930][ T6161] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:57 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1f000000) [ 2017.764517][ T6173] loop3: detected capacity change from 0 to 64 [ 2017.777197][ T6161] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:57 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x3f00, r5}) 18:07:57 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086601, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2017.898529][ T6161] syz-executor.1: attempt to access beyond end of device [ 2017.898529][ T6161] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2017.989796][ T6279] loop3: detected capacity change from 0 to 64 [ 2018.004974][ T6161] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2018.043346][ T28] audit: type=1800 audit(1703095678.099:2766): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:58 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x8, 0x4}, 0x6) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x2818080, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="e9a05c1afbad50280e02c9535895c5454f17c02a07", @ANYRESOCT, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES64=0x0, @ANYRES32=r0], 0x1, 0x17f, &(0x7f00000001c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x9) 18:07:58 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x5000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:58 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x1000000, r5}) 18:07:58 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x20000000) 18:07:58 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x801c581f, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:58 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x2000000, r5}) 18:07:58 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x6000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:58 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x8, 0x4}, 0x6) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x2818080, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="e9a05c1afbad50280e02c9535895c5454f17c02a07", @ANYRESOCT, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES64=0x0, @ANYRES32=r0], 0x1, 0x17f, &(0x7f00000001c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x9) 18:07:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) 18:07:58 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x7000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2018.445385][ T6399] loop3: detected capacity change from 0 to 64 18:07:58 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x3000000, r5}) 18:07:58 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x3f000000) 18:07:58 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc0045878, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:58 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x9000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:58 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/57) 18:07:58 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x4000000, r5}) 18:07:58 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc0045878, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:58 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xf000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2018.631076][ T6517] loop3: detected capacity change from 0 to 64 18:07:58 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xf6ffffff) 18:07:58 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c64cf, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2018.766711][ T6524] loop1: detected capacity change from 0 to 64 [ 2018.820657][ T6524] syz-executor.1: attempt to access beyond end of device [ 2018.820657][ T6524] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2018.869417][ T6524] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2018.882788][ T6528] loop3: detected capacity change from 0 to 64 [ 2018.920197][ T6524] syz-executor.1: attempt to access beyond end of device [ 2018.920197][ T6524] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2018.935020][ T6524] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2018.945800][ T28] audit: type=1800 audit(1703095678.999:2767): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:59 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc0189436, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:59 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (rerun: 32) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/57) 18:07:59 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x192d0000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:59 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x5000000, r5}) 18:07:59 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xfeffffff) 18:07:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) 18:07:59 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x3f000000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:07:59 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc020660b, &(0x7f0000000580)={0x0, 0x0, r5}) 18:07:59 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x6000000, r5}) [ 2019.286300][ T6639] loop3: detected capacity change from 0 to 64 [ 2019.291511][ T6638] loop1: detected capacity change from 0 to 64 18:07:59 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xff0f0000) 18:07:59 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x9effffff, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2019.379067][ T6638] syz-executor.1: attempt to access beyond end of device [ 2019.379067][ T6638] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:07:59 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) [ 2019.459343][ T6655] loop3: detected capacity change from 0 to 64 [ 2019.476191][ T6638] Buffer I/O error on dev loop1, logical block 1037, async page read 18:07:59 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x7000000, r5}) 18:07:59 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xfffbffff) 18:07:59 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/57) 18:07:59 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x2, r5}) [ 2019.642970][ T28] audit: type=1800 audit(1703095679.699:2768): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:07:59 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xf0ffffff, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2019.771410][ T6765] loop3: detected capacity change from 0 to 64 [ 2019.862547][ T6767] loop1: detected capacity change from 0 to 64 18:08:00 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xfffff000) 18:08:00 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x3f000000, r5}) 18:08:00 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xfffff000, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:00 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x3, r5}) 18:08:00 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000040)={@data_h2c={{0x6, 0x2, 0x18, 0x1f, 0xff}, 0x1, 0x3, 0x80000000, 0x3, "64d1587e"}, @void}, 0x80, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x100, 0x0) 18:08:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x0) 18:08:00 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x4, r5}) 18:08:00 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xffffff7f, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:00 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0xfdfdffff, r5}) [ 2020.130095][ T6879] loop3: detected capacity change from 0 to 64 [ 2020.138536][ T6878] loop1: detected capacity change from 0 to 64 18:08:00 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffbff) [ 2020.203960][ T6878] syz-executor.1: attempt to access beyond end of device [ 2020.203960][ T6878] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:08:00 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xffffff9e, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2020.260234][ T6878] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2020.292601][ T6878] syz-executor.1: attempt to access beyond end of device [ 2020.292601][ T6878] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:08:00 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0xfffffdfd, r5}) [ 2020.320643][ T6892] loop3: detected capacity change from 0 to 64 18:08:00 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffff6) 18:08:00 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x5, r5}) [ 2020.360932][ T6878] Buffer I/O error on dev loop1, logical block 1037, async page read 18:08:00 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000040)={@data_h2c={{0x6, 0x2, 0x18, 0x1f, 0xff}, 0x1, 0x3, 0x80000000, 0x3, "64d1587e"}, @void}, 0x80, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x100, 0x0) 18:08:00 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0xffffff7f, r5}) [ 2020.411447][ T28] audit: type=1800 audit(1703095680.469:2769): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:08:00 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xfffffff0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2020.497079][ T6899] loop3: detected capacity change from 0 to 64 [ 2020.605924][ T6906] loop1: detected capacity change from 0 to 64 18:08:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x0) 18:08:00 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x6, r5}) 18:08:00 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xfffffffe) 18:08:00 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:00 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000380)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, r6, r7], 0x3, r10, r3, 0xeb, 0x7, 0x7fff, 0x4, {0x5, 0x8, 0xf6, 0x7fff, 0xffff, 0x303, 0x8, 0x2, 0x6, 0x4, 0x8, 0x8, 0x1, 0x7f, "5f7fe585429e42ae89c3d0a7453a86aa53ddd1ba23410107c70af68fed37e417"}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r11}) 18:08:00 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000040)={@data_h2c={{0x6, 0x2, 0x18, 0x1f, 0xff}, 0x1, 0x3, 0x80000000, 0x3, "64d1587e"}, @void}, 0x80, 0x0, 0x0, 0x0) (async) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000040)={@data_h2c={{0x6, 0x2, 0x18, 0x1f, 0xff}, 0x1, 0x3, 0x80000000, 0x3, "64d1587e"}, @void}, 0x80, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x100, 0x0) 18:08:01 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:01 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x7, r5}) [ 2020.962886][ T7019] loop3: detected capacity change from 0 to 64 [ 2020.975816][ T7023] loop1: detected capacity change from 0 to 64 18:08:01 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x7fd041c7cbe9) 18:08:01 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) (async) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000380)) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, r6, r7], 0x3, r10, r3, 0xeb, 0x7, 0x7fff, 0x4, {0x5, 0x8, 0xf6, 0x7fff, 0xffff, 0x303, 0x8, 0x2, 0x6, 0x4, 0x8, 0x8, 0x1, 0x7f, "5f7fe585429e42ae89c3d0a7453a86aa53ddd1ba23410107c70af68fed37e417"}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r11}) 18:08:01 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x2, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:01 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x300, r5}) [ 2021.099705][ T7043] loop3: detected capacity change from 0 to 64 18:08:01 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x3, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:01 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1000000000000) 18:08:01 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x500, r5}) 18:08:01 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") 18:08:01 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000380)) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x4, 0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, r6, r7], 0x3, r10, r3, 0xeb, 0x7, 0x7fff, 0x4, {0x5, 0x8, 0xf6, 0x7fff, 0xffff, 0x303, 0x8, 0x2, 0x6, 0x4, 0x8, 0x8, 0x1, 0x7f, "5f7fe585429e42ae89c3d0a7453a86aa53ddd1ba23410107c70af68fed37e417"}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r11}) 18:08:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r2, r1, 0x0, 0x0) 18:08:01 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x600, r5}) 18:08:01 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x4, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2021.543349][ T7147] loop3: detected capacity change from 0 to 64 [ 2021.553144][ T7146] loop1: detected capacity change from 0 to 64 18:08:01 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") 18:08:01 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x10000000000000) 18:08:01 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x700, r5}) 18:08:01 executing program 4: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x360d, 0x10000, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:08:01 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x5, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:01 executing program 4: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) (async) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x360d, 0x10000, 0x1f}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:08:01 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1c081000000000) [ 2021.758079][ T7165] loop3: detected capacity change from 0 to 64 [ 2021.774060][ T7167] loop1: detected capacity change from 0 to 64 18:08:01 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x6, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:01 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") [ 2021.870364][ T7173] loop3: detected capacity change from 0 to 64 [ 2021.975762][ T7179] loop1: detected capacity change from 0 to 64 18:08:02 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0xf0ffffffffffff) 18:08:02 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x3f00, r5}) 18:08:02 executing program 4: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) (async) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) (async) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x360d, 0x10000, 0x1f}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r6}) 18:08:02 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x7, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:02 executing program 1: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=""/249, &(0x7f0000000180)=""/228, &(0x7f0000000280)=""/91, 0xf000}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x171140, 0x52) 18:08:02 executing program 2: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1c081000000000) 18:08:02 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x1000000, r5}) 18:08:02 executing program 1: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=""/249, &(0x7f0000000180)=""/228, &(0x7f0000000280)=""/91, 0xf000}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x171140, 0x52) 18:08:02 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x9, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2022.351975][ T7187] loop3: detected capacity change from 0 to 64 18:08:02 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x100000000000000) 18:08:02 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x2000000, r5}) 18:08:02 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x2]}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x46000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r9}) [ 2022.424388][ T7190] loop2: detected capacity change from 0 to 64 18:08:02 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0xf, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:02 executing program 2: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1c081000000000) 18:08:02 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x2]}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x46000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r9}) creat(&(0x7f0000000100)='./file1\x00', 0x0) (async) close(r0) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) (async) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r6, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x2]}) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fcntl$setstatus(r8, 0x4, 0x46000) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r7}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r9}) (async) [ 2022.535139][ T7283] loop3: detected capacity change from 0 to 64 18:08:02 executing program 1: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=""/249, &(0x7f0000000180)=""/228, &(0x7f0000000280)=""/91, 0xf000}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x171140, 0x52) 18:08:02 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0xf0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:02 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzs289KMlEYx/HnjP993yCyWkSLIIg2OWpgtbML6CLEJpE0JNsoQXkpXUaX0iUEtWjXKmOGmYk5WpKk0zTfz8bzzI8znlmcw6MwAiC2arIlSpSk7WIzu3xTUGEvCcCCjNzPtxGA+Em8fneCfWwAiL7nY5GuiDy9XDckkR7rD+y85uVGZjwfimwk3VxlJaf3F3ciO5Jz8/zE+Xnv/urfxHx32/v+/7KU9JIVKbj5qT9/fUq3czIlBwAgHpQU9TpwwZCzVtsq+XXKqct+nXbqilbv+3XGqYsNY14PAGBmRmD/Pzzep4J5Qtv/SW3/A4iuXn9wXm+3rcvPB/aP/onR0D0GxiJ1K/LFDRn85ED9jmUwiPQgJyLBK2GfTADmzbzqdM1ef7DX6tSbVtO6qFaq1aPS4UHZdBp/M9j+2/S/+AFE1EcbEPZKAAAAAAAAAAAAAADArFZlLewlAAAAAFiQRbxgFPYzAgAAAAAAAAAAAAAAAADw17wHAAD//wr2Fng=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x200000000000000) 18:08:02 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x3000000, r5}) 18:08:02 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x21) [ 2022.673962][ T7317] loop2: detected capacity change from 0 to 64 18:08:02 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x4000000, r5}) 18:08:02 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x300, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2022.710741][ T28] audit: type=1804 audit(1703095682.769:2770): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir71981327/syzkaller.mI7jv9/4401/file1" dev="sda1" ino=2044 res=1 errno=0 [ 2022.727109][ T7322] loop3: detected capacity change from 0 to 64 18:08:02 executing program 2: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x1c081000000000) [ 2022.801839][ T7328] loop1: detected capacity change from 0 to 64 18:08:02 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) (async) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x2]}) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) (async) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x46000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r9}) [ 2022.829073][ T28] audit: type=1804 audit(1703095682.819:2771): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir71981327/syzkaller.mI7jv9/4401/file1" dev="sda1" ino=2044 res=1 errno=0 18:08:02 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x500, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2022.884237][ T7328] syz-executor.1: attempt to access beyond end of device [ 2022.884237][ T7328] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 18:08:03 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x300000000000000) 18:08:03 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x5000000, r5}) [ 2022.935642][ T7328] Buffer I/O error on dev loop1, logical block 1037, async page read [ 2022.961661][ T7335] loop2: detected capacity change from 0 to 64 18:08:03 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x600, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:03 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x6000000, r5}) [ 2023.003124][ T7328] syz-executor.1: attempt to access beyond end of device [ 2023.003124][ T7328] loop1: rw=0, sector=2074, nr_sectors = 2 limit=64 [ 2023.032127][ T7360] loop3: detected capacity change from 0 to 64 [ 2023.043389][ T7328] Buffer I/O error on dev loop1, logical block 1037, async page read 18:08:03 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a305366660bf17b5f0be72832ccdd06fd89a3da2681c97ad5cf890ffe3513a7250e8fb8bd31339495090978869b5f63fc43826903f45837fff78e3e3c6a4e8d92ceaffa67163bba6572876000"], 0x4f) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:08:03 executing program 2: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") [ 2023.117354][ T28] audit: type=1800 audit(1703095683.179:2772): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=6 res=0 errno=0 18:08:03 executing program 1: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) (rerun: 64) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x21) 18:08:03 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x400000000000000) 18:08:03 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) (async) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a305366660bf17b5f0be72832ccdd06fd89a3da2681c97ad5cf890ffe3513a7250e8fb8bd31339495090978869b5f63fc43826903f45837fff78e3e3c6a4e8d92ceaffa67163bba6572876000"], 0x4f) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) 18:08:03 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x700, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:03 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x7000000, r5}) [ 2023.261688][ T7424] loop2: detected capacity change from 0 to 64 18:08:03 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x900, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 18:08:03 executing program 2: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x5, r5}) 18:08:03 executing program 4: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a305366660bf17b5f0be72832ccdd06fd89a3da2681c97ad5cf890ffe3513a7250e8fb8bd31339495090978869b5f63fc43826903f45837fff78e3e3c6a4e8d92ceaffa67163bba6572876000"], 0x4f) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) creat(&(0x7f0000000100)='./file1\x00', 0x0) (async) close(r0) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2}) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a305366660bf17b5f0be72832ccdd06fd89a3da2681c97ad5cf890ffe3513a7250e8fb8bd31339495090978869b5f63fc43826903f45837fff78e3e3c6a4e8d92ceaffa67163bba6572876000"], 0x4f) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r5}) (async) 18:08:03 executing program 5: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x2e, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000880)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x3f000000, r5}) [ 2023.397721][ T7461] loop3: detected capacity change from 0 to 64 [ 2023.420426][ T7462] loop1: detected capacity change from 0 to 64 18:08:03 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0xf00, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2023.491081][ T7516] ------------[ cut here ]------------ [ 2023.497151][ T7516] WARNING: CPU: 0 PID: 7516 at drivers/gpu/drm/drm_prime.c:326 drm_gem_prime_fd_to_handle+0x4be/0x550 [ 2023.508146][ T7516] Modules linked in: [ 2023.512045][ T7516] CPU: 0 PID: 7516 Comm: syz-executor.4 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2023.522640][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2023.532801][ T7516] RIP: 0010:drm_gem_prime_fd_to_handle+0x4be/0x550 [ 2023.539382][ T7516] Code: 00 00 48 89 df e8 12 53 6e ff e9 e9 fd ff ff e8 18 ec 93 fc 4c 89 ff 41 89 dc e8 4d e4 8e 05 e9 b8 fe ff ff e8 03 ec 93 fc 90 <0f> 0b 90 e9 47 fd ff ff e8 35 96 ea fc e9 16 fc ff ff e8 2b 96 ea [ 2023.559164][ T7516] RSP: 0018:ffffc9000e33fc48 EFLAGS: 00010293 [ 2023.565228][ T7516] RAX: 0000000000000000 RBX: ffff888015b1e000 RCX: ffffffff84f37fcb [ 2023.573227][ T7516] RDX: ffff888034c3bb80 RSI: ffffffff84f382cd RDI: ffff888015b1e128 [ 2023.581317][ T7516] RBP: ffff8880213ef800 R08: 0000000000000007 R09: fffffffffffff000 [ 2023.589426][ T7516] R10: ffff888015b1e000 R11: 0000000000000001 R12: ffff888027a03000 [ 2023.597439][ T7516] R13: ffff8880374e1000 R14: ffffc9000e33fe10 R15: ffff88801cb20c10 [ 2023.605444][ T7516] FS: 00007f3cb3ff86c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 2023.614434][ T7516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2023.621283][ T7516] CR2: 00007f98faa85ec0 CR3: 0000000018bff000 CR4: 0000000000350ef0 [ 2023.629331][ T7516] Call Trace: [ 2023.632626][ T7516] [ 2023.635597][ T7516] ? show_regs+0x8f/0xa0 [ 2023.639914][ T7516] ? __warn+0xe6/0x390 [ 2023.644010][ T7516] ? drm_gem_prime_fd_to_handle+0x4be/0x550 [ 2023.650000][ T7516] ? report_bug+0x3bc/0x580 [ 2023.654561][ T7516] ? handle_bug+0x3d/0x70 [ 2023.658960][ T7516] ? exc_invalid_op+0x17/0x40 [ 2023.663665][ T7516] ? asm_exc_invalid_op+0x1a/0x20 [ 2023.668771][ T7516] ? drm_gem_prime_fd_to_handle+0x1bb/0x550 [ 2023.674691][ T7516] ? drm_gem_prime_fd_to_handle+0x4bd/0x550 [ 2023.680693][ T7516] ? drm_gem_prime_fd_to_handle+0x4be/0x550 [ 2023.686670][ T7516] ? drm_gem_prime_fd_to_handle+0x4bd/0x550 [ 2023.692583][ T7516] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 2023.698457][ T7516] drm_ioctl_kernel+0x28c/0x4d0 [ 2023.703359][ T7516] ? drm_prime_destroy_file_private+0x60/0x60 [ 2023.709497][ T7516] ? drm_setversion+0x870/0x870 [ 2023.714376][ T7516] drm_ioctl+0x5cb/0xbf0 [ 2023.718706][ T7516] ? drm_prime_destroy_file_private+0x60/0x60 [ 2023.724934][ T7516] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2023.730036][ T7516] ? reacquire_held_locks+0x4c0/0x4c0 [ 2023.735483][ T7516] ? bpf_lsm_file_ioctl+0x9/0x10 18:08:03 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000005, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410101, 0x500000000000000) [ 2023.740518][ T7516] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2023.745567][ T7516] __x64_sys_ioctl+0x18f/0x210 [ 2023.750441][ T7516] do_syscall_64+0x40/0x110 [ 2023.754997][ T7516] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2023.760968][ T7516] RIP: 0033:0x7f3cb327cbe9 [ 2023.765410][ T7516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2023.785070][ C0] vkms_vblank_simulate: vblank timer overrun 18:08:03 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, r0, 0x1, 0x0, 0x192d, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 2023.791183][ T7516] RSP: 002b:00007f3cb3ff80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2023.799683][ T7516] RAX: ffffffffffffffda RBX: 00007f3cb339c120 RCX: 00007f3cb327cbe9 [ 2023.807739][ T7516] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000003 [ 2023.815718][ T7516] RBP: 00007f3cb32c847a R08: 0000000000000000 R09: 0000000000000000 [ 2023.823889][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2023.831920][ T7516] R13: 000000000000000b R14: 00007f3cb339c120 R15: 00007ffd1ffd8558 [ 2023.839955][ T7516] [ 2023.842986][ T7516] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2023.850276][ T7516] CPU: 0 PID: 7516 Comm: syz-executor.4 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0 [ 2023.860604][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 2023.870666][ T7516] Call Trace: [ 2023.873952][ T7516] [ 2023.876896][ T7516] dump_stack_lvl+0xd9/0x1b0 [ 2023.881503][ T7516] panic+0x6dc/0x790 [ 2023.885415][ T7516] ? panic_smp_self_stop+0xa0/0xa0 [ 2023.890537][ T7516] ? show_trace_log_lvl+0x363/0x4f0 [ 2023.895757][ T7516] ? check_panic_on_warn+0x1f/0xb0 [ 2023.900887][ T7516] ? drm_gem_prime_fd_to_handle+0x4be/0x550 [ 2023.906790][ T7516] check_panic_on_warn+0xab/0xb0 [ 2023.911760][ T7516] __warn+0xf2/0x390 [ 2023.915678][ T7516] ? drm_gem_prime_fd_to_handle+0x4be/0x550 [ 2023.921597][ T7516] report_bug+0x3bc/0x580 [ 2023.925948][ T7516] handle_bug+0x3d/0x70 [ 2023.930125][ T7516] exc_invalid_op+0x17/0x40 [ 2023.934629][ T7516] asm_exc_invalid_op+0x1a/0x20 [ 2023.939468][ T7516] RIP: 0010:drm_gem_prime_fd_to_handle+0x4be/0x550 [ 2023.945960][ T7516] Code: 00 00 48 89 df e8 12 53 6e ff e9 e9 fd ff ff e8 18 ec 93 fc 4c 89 ff 41 89 dc e8 4d e4 8e 05 e9 b8 fe ff ff e8 03 ec 93 fc 90 <0f> 0b 90 e9 47 fd ff ff e8 35 96 ea fc e9 16 fc ff ff e8 2b 96 ea [ 2023.965556][ T7516] RSP: 0018:ffffc9000e33fc48 EFLAGS: 00010293 [ 2023.971612][ T7516] RAX: 0000000000000000 RBX: ffff888015b1e000 RCX: ffffffff84f37fcb [ 2023.979570][ T7516] RDX: ffff888034c3bb80 RSI: ffffffff84f382cd RDI: ffff888015b1e128 [ 2023.987529][ T7516] RBP: ffff8880213ef800 R08: 0000000000000007 R09: fffffffffffff000 [ 2023.995486][ T7516] R10: ffff888015b1e000 R11: 0000000000000001 R12: ffff888027a03000 [ 2024.003443][ T7516] R13: ffff8880374e1000 R14: ffffc9000e33fe10 R15: ffff88801cb20c10 [ 2024.011408][ T7516] ? drm_gem_prime_fd_to_handle+0x1bb/0x550 [ 2024.017292][ T7516] ? drm_gem_prime_fd_to_handle+0x4bd/0x550 [ 2024.023181][ T7516] ? drm_gem_prime_fd_to_handle+0x4bd/0x550 [ 2024.029070][ T7516] drm_prime_fd_to_handle_ioctl+0xcf/0x100 [ 2024.034869][ T7516] drm_ioctl_kernel+0x28c/0x4d0 [ 2024.039712][ T7516] ? drm_prime_destroy_file_private+0x60/0x60 [ 2024.045772][ T7516] ? drm_setversion+0x870/0x870 [ 2024.050620][ T7516] drm_ioctl+0x5cb/0xbf0 [ 2024.054856][ T7516] ? drm_prime_destroy_file_private+0x60/0x60 [ 2024.060916][ T7516] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2024.065930][ T7516] ? reacquire_held_locks+0x4c0/0x4c0 [ 2024.071309][ T7516] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2024.076237][ T7516] ? drm_ioctl_kernel+0x4d0/0x4d0 [ 2024.081258][ T7516] __x64_sys_ioctl+0x18f/0x210 [ 2024.086027][ T7516] do_syscall_64+0x40/0x110 [ 2024.090526][ T7516] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2024.096409][ T7516] RIP: 0033:0x7f3cb327cbe9 [ 2024.100813][ T7516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2024.120412][ T7516] RSP: 002b:00007f3cb3ff80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2024.128812][ T7516] RAX: ffffffffffffffda RBX: 00007f3cb339c120 RCX: 00007f3cb327cbe9 [ 2024.136771][ T7516] RDX: 0000000020000580 RSI: 00000000c00c642e RDI: 0000000000000003 [ 2024.144727][ T7516] RBP: 00007f3cb32c847a R08: 0000000000000000 R09: 0000000000000000 [ 2024.152683][ T7516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2024.160640][ T7516] R13: 000000000000000b R14: 00007f3cb339c120 R15: 00007ffd1ffd8558 [ 2024.168612][ T7516] [ 2024.171861][ T7516] Kernel Offset: disabled [ 2024.176414][ T7516] Rebooting in 86400 seconds..