0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r5, 0xc, 0xffffffffffffffff, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1096.728524] attempt to access beyond end of device [ 1096.741534] loop4: rw=2049, want=134, limit=16 [ 1096.749490] attempt to access beyond end of device [ 1096.755421] loop4: rw=2049, want=159, limit=16 [ 1096.760244] attempt to access beyond end of device [ 1096.770323] loop4: rw=2049, want=189, limit=16 10:38:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1096.783939] attempt to access beyond end of device [ 1096.787104] attempt to access beyond end of device [ 1096.788912] loop0: rw=1, want=40, limit=16 [ 1096.789008] attempt to access beyond end of device [ 1096.845554] loop4: rw=2049, want=197, limit=16 [ 1096.857212] attempt to access beyond end of device [ 1096.857236] attempt to access beyond end of device [ 1096.867523] loop4: rw=2049, want=225, limit=16 [ 1096.874896] attempt to access beyond end of device [ 1096.879997] loop4: rw=2049, want=226, limit=16 [ 1096.886102] attempt to access beyond end of device [ 1096.890554] loop3: rw=1, want=75, limit=16 10:38:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1096.929331] loop4: rw=2049, want=227, limit=16 [ 1096.937473] attempt to access beyond end of device [ 1096.961972] attempt to access beyond end of device [ 1096.973864] loop0: rw=1, want=73, limit=16 10:38:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1096.978645] loop4: rw=2049, want=228, limit=16 [ 1096.981694] loop3: rw=1, want=76, limit=16 [ 1096.995711] attempt to access beyond end of device [ 1097.000824] attempt to access beyond end of device [ 1097.008608] attempt to access beyond end of device [ 1097.016564] attempt to access beyond end of device [ 1097.026521] loop4: rw=2049, want=229, limit=16 [ 1097.037774] loop0: rw=1, want=115, limit=16 [ 1097.043413] loop5: rw=1, want=256, limit=16 [ 1097.052516] attempt to access beyond end of device [ 1097.058797] attempt to access beyond end of device [ 1097.064195] attempt to access beyond end of device [ 1097.066542] loop3: rw=1, want=77, limit=16 [ 1097.071716] loop2: rw=2049, want=40, limit=16 [ 1097.081941] loop4: rw=2049, want=230, limit=16 [ 1097.087232] attempt to access beyond end of device [ 1097.087721] loop0: rw=1, want=116, limit=16 [ 1097.096652] loop2: rw=2049, want=41, limit=16 [ 1097.115347] attempt to access beyond end of device [ 1097.119064] attempt to access beyond end of device [ 1097.121545] attempt to access beyond end of device [ 1097.132508] attempt to access beyond end of device [ 1097.147938] loop3: rw=1, want=78, limit=16 [ 1097.156914] loop4: rw=2049, want=237, limit=16 [ 1097.156921] loop2: rw=2049, want=42, limit=16 [ 1097.166024] loop0: rw=1, want=117, limit=16 [ 1097.178197] attempt to access beyond end of device [ 1097.190051] attempt to access beyond end of device [ 1097.197268] attempt to access beyond end of device [ 1097.204549] attempt to access beyond end of device [ 1097.209001] loop3: rw=1, want=79, limit=16 [ 1097.211496] loop2: rw=2049, want=43, limit=16 [ 1097.224027] attempt to access beyond end of device [ 1097.238877] loop4: rw=2049, want=247, limit=16 [ 1097.243672] loop0: rw=1, want=118, limit=16 [ 1097.248858] loop2: rw=2049, want=66, limit=16 [ 1097.254780] attempt to access beyond end of device [ 1097.258079] attempt to access beyond end of device [ 1097.259968] loop2: rw=2049, want=96, limit=16 [ 1097.270986] attempt to access beyond end of device [ 1097.272014] attempt to access beyond end of device [ 1097.281515] loop2: rw=2049, want=105, limit=16 [ 1097.288513] attempt to access beyond end of device [ 1097.293897] loop2: rw=2049, want=135, limit=16 [ 1097.305593] attempt to access beyond end of device [ 1097.310734] loop2: rw=2049, want=136, limit=16 [ 1097.311581] loop0: rw=1, want=132, limit=16 [ 1097.316319] attempt to access beyond end of device [ 1097.325540] loop2: rw=2049, want=137, limit=16 [ 1097.330772] attempt to access beyond end of device 10:38:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x0, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1097.330842] attempt to access beyond end of device [ 1097.344220] loop3: rw=1, want=80, limit=16 [ 1097.344269] attempt to access beyond end of device [ 1097.344279] loop3: rw=1, want=81, limit=16 [ 1097.344309] attempt to access beyond end of device [ 1097.344318] loop3: rw=1, want=82, limit=16 [ 1097.344348] attempt to access beyond end of device [ 1097.344356] loop3: rw=1, want=84, limit=16 [ 1097.344472] attempt to access beyond end of device [ 1097.344482] loop3: rw=1, want=140, limit=16 [ 1097.344633] attempt to access beyond end of device [ 1097.344642] loop3: rw=1, want=205, limit=16 [ 1097.344751] attempt to access beyond end of device [ 1097.344760] loop3: rw=1, want=256, limit=16 [ 1097.357533] attempt to access beyond end of device [ 1097.357547] loop0: rw=1, want=133, limit=16 [ 1097.357577] attempt to access beyond end of device [ 1097.357586] loop0: rw=1, want=134, limit=16 [ 1097.357616] attempt to access beyond end of device [ 1097.357626] loop0: rw=1, want=135, limit=16 [ 1097.357656] attempt to access beyond end of device [ 1097.357665] loop0: rw=1, want=136, limit=16 [ 1097.357750] attempt to access beyond end of device [ 1097.357759] loop0: rw=1, want=160, limit=16 [ 1097.357826] attempt to access beyond end of device [ 1097.357836] loop0: rw=1, want=173, limit=16 [ 1097.357893] attempt to access beyond end of device [ 1097.357902] loop0: rw=1, want=182, limit=16 [ 1097.357956] attempt to access beyond end of device [ 1097.357964] loop0: rw=1, want=183, limit=16 [ 1097.357994] attempt to access beyond end of device [ 1097.358003] loop0: rw=1, want=184, limit=16 [ 1097.358032] attempt to access beyond end of device [ 1097.358040] loop0: rw=1, want=185, limit=16 [ 1097.358068] attempt to access beyond end of device [ 1097.358077] loop0: rw=1, want=186, limit=16 [ 1097.358105] attempt to access beyond end of device [ 1097.358114] loop0: rw=1, want=188, limit=16 [ 1097.358142] attempt to access beyond end of device [ 1097.358151] loop0: rw=1, want=189, limit=16 [ 1097.358179] attempt to access beyond end of device [ 1097.358189] loop0: rw=1, want=190, limit=16 [ 1097.358216] attempt to access beyond end of device [ 1097.358225] loop0: rw=1, want=191, limit=16 [ 1097.358321] attempt to access beyond end of device [ 1097.358331] loop0: rw=1, want=199, limit=16 [ 1097.358421] attempt to access beyond end of device [ 1097.358430] loop0: rw=1, want=240, limit=16 [ 1097.364966] attempt to access beyond end of device [ 1097.364981] loop0: rw=1, want=241, limit=16 [ 1097.365014] attempt to access beyond end of device [ 1097.365024] loop0: rw=1, want=242, limit=16 [ 1097.365052] attempt to access beyond end of device [ 1097.365388] loop0: rw=1, want=246, limit=16 [ 1097.365419] attempt to access beyond end of device [ 1097.365429] loop0: rw=1, want=247, limit=16 [ 1097.365459] attempt to access beyond end of device [ 1097.365468] loop0: rw=1, want=248, limit=16 [ 1097.365512] attempt to access beyond end of device [ 1097.365522] loop0: rw=1, want=249, limit=16 [ 1097.365552] attempt to access beyond end of device [ 1097.365560] loop0: rw=1, want=250, limit=16 [ 1097.366335] attempt to access beyond end of device [ 1097.366346] loop0: rw=1, want=251, limit=16 [ 1097.366399] attempt to access beyond end of device [ 1097.366408] loop0: rw=1, want=253, limit=16 [ 1097.366436] attempt to access beyond end of device [ 1097.366445] loop0: rw=1, want=254, limit=16 [ 1097.366474] attempt to access beyond end of device [ 1097.366483] loop0: rw=1, want=255, limit=16 [ 1097.366511] attempt to access beyond end of device [ 1097.370201] loop0: rw=1, want=256, limit=16 [ 1097.373520] loop2: rw=2049, want=138, limit=16 [ 1097.405382] loop5: rw=2049, want=188, limit=16 [ 1097.409181] attempt to access beyond end of device [ 1097.411575] attempt to access beyond end of device [ 1097.415633] loop2: rw=2049, want=139, limit=16 [ 1097.434114] loop4: rw=1, want=89, limit=16 [ 1097.442576] attempt to access beyond end of device [ 1097.494166] attempt to access beyond end of device [ 1097.506317] attempt to access beyond end of device [ 1097.546647] loop4: rw=1, want=98, limit=16 [ 1097.559433] loop0: rw=1, want=258, limit=16 [ 1097.649263] loop2: rw=2049, want=140, limit=16 10:38:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1097.660440] attempt to access beyond end of device [ 1097.665361] attempt to access beyond end of device [ 1097.726319] attempt to access beyond end of device [ 1097.735442] loop0: rw=1, want=259, limit=16 [ 1097.822095] loop4: rw=1, want=123, limit=16 [ 1097.826525] attempt to access beyond end of device [ 1097.831467] loop4: rw=1, want=124, limit=16 [ 1097.839167] attempt to access beyond end of device [ 1097.844481] loop3: rw=2049, want=168, limit=16 [ 1097.853644] attempt to access beyond end of device [ 1097.853656] loop0: rw=1, want=260, limit=16 [ 1097.853686] attempt to access beyond end of device [ 1097.853696] loop0: rw=1, want=261, limit=16 [ 1097.865800] loop2: rw=2049, want=141, limit=16 [ 1097.865851] attempt to access beyond end of device [ 1097.865862] loop2: rw=2049, want=147, limit=16 [ 1097.865896] attempt to access beyond end of device [ 1097.865906] loop2: rw=2049, want=169, limit=16 [ 1097.865940] attempt to access beyond end of device [ 1097.865950] loop2: rw=2049, want=200, limit=16 [ 1097.882290] attempt to access beyond end of device [ 1097.882303] loop5: rw=1, want=260, limit=16 [ 1097.981963] attempt to access beyond end of device [ 1097.996887] loop4: rw=1, want=125, limit=16 [ 1098.001289] attempt to access beyond end of device [ 1098.012099] loop4: rw=1, want=126, limit=16 [ 1098.016482] attempt to access beyond end of device [ 1098.021415] loop4: rw=1, want=127, limit=16 10:38:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1098.027853] attempt to access beyond end of device [ 1098.041763] loop4: rw=1, want=128, limit=16 [ 1098.046142] attempt to access beyond end of device [ 1098.051843] attempt to access beyond end of device [ 1098.051855] loop2: rw=1, want=59, limit=16 [ 1098.051913] attempt to access beyond end of device [ 1098.051923] loop2: rw=1, want=60, limit=16 [ 1098.051953] attempt to access beyond end of device [ 1098.051962] loop2: rw=1, want=61, limit=16 [ 1098.051990] attempt to access beyond end of device [ 1098.051999] loop2: rw=1, want=62, limit=16 [ 1098.052028] attempt to access beyond end of device [ 1098.052037] loop2: rw=1, want=63, limit=16 [ 1098.052066] attempt to access beyond end of device [ 1098.052074] loop2: rw=1, want=64, limit=16 [ 1098.052102] attempt to access beyond end of device [ 1098.052111] loop2: rw=1, want=65, limit=16 [ 1098.052138] attempt to access beyond end of device [ 1098.052147] loop2: rw=1, want=67, limit=16 [ 1098.052177] attempt to access beyond end of device [ 1098.052186] loop2: rw=1, want=68, limit=16 [ 1098.052258] attempt to access beyond end of device [ 1098.052267] loop2: rw=1, want=92, limit=16 [ 1098.052319] attempt to access beyond end of device [ 1098.052328] loop2: rw=1, want=93, limit=16 [ 1098.052357] attempt to access beyond end of device [ 1098.052365] loop2: rw=1, want=94, limit=16 [ 1098.052395] attempt to access beyond end of device [ 1098.052404] loop2: rw=1, want=95, limit=16 [ 1098.052433] attempt to access beyond end of device [ 1098.052441] loop2: rw=1, want=97, limit=16 10:38:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1098.052470] attempt to access beyond end of device [ 1098.052478] loop2: rw=1, want=98, limit=16 [ 1098.052506] attempt to access beyond end of device [ 1098.052514] loop2: rw=1, want=99, limit=16 [ 1098.052540] attempt to access beyond end of device [ 1098.090841] loop4: rw=1, want=129, limit=16 [ 1098.148733] loop2: rw=1, want=100, limit=16 [ 1098.156558] attempt to access beyond end of device [ 1098.192945] attempt to access beyond end of device [ 1098.202657] loop4: rw=1, want=130, limit=16 10:38:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1098.249513] attempt to access beyond end of device [ 1098.258626] loop4: rw=1, want=133, limit=16 [ 1098.273010] attempt to access beyond end of device [ 1098.277322] attempt to access beyond end of device [ 1098.291038] attempt to access beyond end of device [ 1098.310487] loop3: rw=1, want=256, limit=16 [ 1098.319782] loop5: rw=2049, want=188, limit=16 [ 1098.332217] loop2: rw=1, want=101, limit=16 [ 1098.337162] loop4: rw=1, want=158, limit=16 [ 1098.343490] attempt to access beyond end of device [ 1098.349993] attempt to access beyond end of device [ 1098.355379] loop0: rw=2049, want=40, limit=16 [ 1098.361824] attempt to access beyond end of device [ 1098.366500] attempt to access beyond end of device [ 1098.371533] loop2: rw=1, want=102, limit=16 [ 1098.377562] loop4: rw=1, want=183, limit=16 [ 1098.390884] attempt to access beyond end of device [ 1098.396790] attempt to access beyond end of device [ 1098.403169] loop0: rw=2049, want=41, limit=16 10:38:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1098.411216] loop2: rw=1, want=103, limit=16 [ 1098.423006] attempt to access beyond end of device [ 1098.426427] loop4: rw=1, want=184, limit=16 [ 1098.435293] attempt to access beyond end of device [ 1098.439517] loop0: rw=2049, want=42, limit=16 [ 1098.440515] loop5: rw=1, want=260, limit=16 [ 1098.453070] FAT-fs (loop3): bogus number of reserved sectors [ 1098.456051] attempt to access beyond end of device [ 1098.463065] attempt to access beyond end of device [ 1098.469119] attempt to access beyond end of device [ 1098.474435] loop2: rw=1, want=104, limit=16 [ 1098.478861] attempt to access beyond end of device [ 1098.479744] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1098.484345] loop2: rw=1, want=106, limit=16 [ 1098.495059] loop0: rw=2049, want=43, limit=16 [ 1098.499711] loop4: rw=1, want=185, limit=16 [ 1098.521298] attempt to access beyond end of device [ 1098.528146] attempt to access beyond end of device [ 1098.541005] attempt to access beyond end of device [ 1098.549115] loop0: rw=2049, want=44, limit=16 [ 1098.566153] loop4: rw=1, want=186, limit=16 [ 1098.580142] loop2: rw=1, want=107, limit=16 [ 1098.586993] attempt to access beyond end of device [ 1098.592979] attempt to access beyond end of device [ 1098.606897] attempt to access beyond end of device [ 1098.619197] loop0: rw=2049, want=45, limit=16 [ 1098.626172] loop4: rw=1, want=187, limit=16 [ 1098.655751] loop2: rw=1, want=108, limit=16 [ 1098.664958] attempt to access beyond end of device [ 1098.672632] attempt to access beyond end of device [ 1098.772103] attempt to access beyond end of device [ 1098.777372] loop4: rw=1, want=188, limit=16 [ 1098.783333] loop0: rw=2049, want=46, limit=16 [ 1098.804511] loop2: rw=1, want=109, limit=16 [ 1098.809020] attempt to access beyond end of device [ 1098.824758] attempt to access beyond end of device [ 1098.837079] attempt to access beyond end of device [ 1098.846588] loop4: rw=1, want=198, limit=16 [ 1098.852624] loop0: rw=2049, want=119, limit=16 [ 1098.865889] loop2: rw=1, want=110, limit=16 [ 1098.874658] attempt to access beyond end of device [ 1098.883459] attempt to access beyond end of device [ 1098.897177] attempt to access beyond end of device [ 1098.905785] loop4: rw=1, want=199, limit=16 [ 1098.915468] loop0: rw=2049, want=150, limit=16 10:38:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1098.927102] loop2: rw=1, want=134, limit=16 [ 1098.939148] attempt to access beyond end of device [ 1098.952533] attempt to access beyond end of device [ 1098.959919] attempt to access beyond end of device [ 1098.968548] loop0: rw=2049, want=168, limit=16 [ 1098.978176] loop4: rw=1, want=200, limit=16 [ 1099.000718] loop2: rw=1, want=142, limit=16 [ 1099.011257] attempt to access beyond end of device [ 1099.028905] attempt to access beyond end of device [ 1099.053938] loop4: rw=1, want=224, limit=16 10:38:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1099.076998] loop2: rw=1, want=143, limit=16 [ 1099.084563] attempt to access beyond end of device [ 1099.089511] loop2: rw=1, want=144, limit=16 [ 1099.094017] attempt to access beyond end of device [ 1099.098945] loop2: rw=1, want=145, limit=16 [ 1099.103441] attempt to access beyond end of device [ 1099.108538] loop2: rw=1, want=146, limit=16 [ 1099.112985] attempt to access beyond end of device [ 1099.117916] loop2: rw=1, want=148, limit=16 [ 1099.122349] attempt to access beyond end of device 10:38:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1099.125467] attempt to access beyond end of device [ 1099.133790] loop2: rw=1, want=149, limit=16 [ 1099.138348] attempt to access beyond end of device [ 1099.140486] attempt to access beyond end of device [ 1099.143347] loop2: rw=1, want=150, limit=16 [ 1099.143426] attempt to access beyond end of device [ 1099.150216] loop0: rw=1, want=118, limit=16 [ 1099.152718] loop2: rw=1, want=166, limit=16 [ 1099.152781] attempt to access beyond end of device [ 1099.159819] attempt to access beyond end of device [ 1099.162077] loop2: rw=1, want=167, limit=16 [ 1099.167515] attempt to access beyond end of device [ 1099.171326] attempt to access beyond end of device [ 1099.190682] loop2: rw=1, want=168, limit=16 [ 1099.195123] attempt to access beyond end of device [ 1099.200047] loop2: rw=1, want=170, limit=16 [ 1099.204489] attempt to access beyond end of device [ 1099.209417] loop2: rw=1, want=171, limit=16 [ 1099.213979] attempt to access beyond end of device [ 1099.218910] loop2: rw=1, want=172, limit=16 [ 1099.223754] loop5: rw=1, want=256, limit=16 [ 1099.234891] loop0: rw=1, want=143, limit=16 [ 1099.239284] attempt to access beyond end of device [ 1099.244395] loop4: rw=1, want=231, limit=16 [ 1099.248750] attempt to access beyond end of device [ 1099.259867] attempt to access beyond end of device [ 1099.265415] loop0: rw=1, want=144, limit=16 [ 1099.269782] attempt to access beyond end of device [ 1099.282519] attempt to access beyond end of device [ 1099.301653] loop4: rw=1, want=232, limit=16 [ 1099.301674] loop3: rw=2049, want=40, limit=16 [ 1099.313218] loop2: rw=1, want=173, limit=16 [ 1099.323616] attempt to access beyond end of device [ 1099.324059] attempt to access beyond end of device [ 1099.328650] attempt to access beyond end of device [ 1099.336051] loop3: rw=2049, want=100, limit=16 [ 1099.344614] loop0: rw=1, want=145, limit=16 [ 1099.348194] loop4: rw=1, want=233, limit=16 [ 1099.349979] attempt to access beyond end of device [ 1099.359639] loop2: rw=1, want=174, limit=16 [ 1099.375477] attempt to access beyond end of device [ 1099.380678] attempt to access beyond end of device [ 1099.385813] loop3: rw=2049, want=128, limit=16 [ 1099.386091] attempt to access beyond end of device [ 1099.395463] loop0: rw=1, want=146, limit=16 [ 1099.395509] attempt to access beyond end of device [ 1099.410416] attempt to access beyond end of device [ 1099.424007] loop4: rw=1, want=234, limit=16 [ 1099.439667] attempt to access beyond end of device [ 1099.445158] loop2: rw=1, want=175, limit=16 [ 1099.459587] attempt to access beyond end of device [ 1099.465812] loop4: rw=1, want=235, limit=16 [ 1099.479843] attempt to access beyond end of device [ 1099.480672] loop3: rw=2049, want=129, limit=16 [ 1099.487268] loop2: rw=1, want=199, limit=16 [ 1099.487409] attempt to access beyond end of device [ 1099.487419] loop2: rw=1, want=256, limit=16 [ 1099.495122] loop0: rw=1, want=147, limit=16 [ 1099.495164] attempt to access beyond end of device [ 1099.495174] loop0: rw=1, want=148, limit=16 [ 1099.495205] attempt to access beyond end of device [ 1099.495215] loop0: rw=1, want=149, limit=16 [ 1099.495244] attempt to access beyond end of device [ 1099.495253] loop0: rw=1, want=151, limit=16 [ 1099.495282] attempt to access beyond end of device [ 1099.495291] loop0: rw=1, want=152, limit=16 [ 1099.495359] attempt to access beyond end of device [ 1099.495368] loop0: rw=1, want=160, limit=16 [ 1099.495457] attempt to access beyond end of device [ 1099.495466] loop0: rw=1, want=184, limit=16 [ 1099.495518] attempt to access beyond end of device [ 1099.495527] loop0: rw=1, want=185, limit=16 [ 1099.495556] attempt to access beyond end of device [ 1099.495565] loop0: rw=1, want=186, limit=16 [ 1099.495595] attempt to access beyond end of device [ 1099.495604] loop0: rw=1, want=187, limit=16 [ 1099.495632] attempt to access beyond end of device [ 1099.495650] loop0: rw=1, want=189, limit=16 [ 1099.495682] attempt to access beyond end of device [ 1099.495691] loop0: rw=1, want=190, limit=16 [ 1099.495719] attempt to access beyond end of device [ 1099.495728] loop0: rw=1, want=191, limit=16 [ 1099.495757] attempt to access beyond end of device [ 1099.495766] loop0: rw=1, want=192, limit=16 [ 1099.495794] attempt to access beyond end of device [ 1099.495802] loop0: rw=1, want=193, limit=16 [ 1099.495904] attempt to access beyond end of device [ 1099.495913] loop0: rw=1, want=249, limit=16 [ 1099.495992] attempt to access beyond end of device [ 1099.496001] loop0: rw=1, want=258, limit=16 [ 1099.516011] loop4: rw=1, want=236, limit=16 [ 1099.516057] attempt to access beyond end of device [ 1099.516067] loop4: rw=1, want=238, limit=16 [ 1099.516097] attempt to access beyond end of device [ 1099.516107] loop4: rw=1, want=239, limit=16 [ 1099.516163] attempt to access beyond end of device 10:38:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1099.516171] loop4: rw=1, want=240, limit=16 [ 1099.516291] attempt to access beyond end of device [ 1099.516301] loop4: rw=1, want=241, limit=16 [ 1099.516331] attempt to access beyond end of device [ 1099.516340] loop4: rw=1, want=242, limit=16 [ 1099.516370] attempt to access beyond end of device [ 1099.516379] loop4: rw=1, want=243, limit=16 [ 1099.516409] attempt to access beyond end of device [ 1099.516417] loop4: rw=1, want=244, limit=16 [ 1099.516516] attempt to access beyond end of device [ 1099.516526] loop4: rw=1, want=245, limit=16 [ 1099.516555] attempt to access beyond end of device [ 1099.516564] loop4: rw=1, want=246, limit=16 [ 1099.516594] attempt to access beyond end of device [ 1099.516603] loop4: rw=1, want=248, limit=16 [ 1099.516669] attempt to access beyond end of device [ 1099.516677] loop4: rw=1, want=256, limit=16 [ 1099.975659] attempt to access beyond end of device [ 1099.981158] buffer_io_error: 250 callbacks suppressed [ 1099.981168] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 1099.988999] loop5: rw=1, want=256, limit=16 [ 1099.993995] attempt to access beyond end of device [ 1100.050702] loop3: rw=2049, want=130, limit=16 [ 1100.057283] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 1100.067958] attempt to access beyond end of device [ 1100.073027] loop3: rw=2049, want=131, limit=16 [ 1100.077609] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 1100.085688] attempt to access beyond end of device 10:38:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x0, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1100.090627] loop3: rw=2049, want=132, limit=16 [ 1100.095515] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 1100.105874] attempt to access beyond end of device [ 1100.110904] loop3: rw=2049, want=133, limit=16 [ 1100.115658] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 1100.125716] attempt to access beyond end of device [ 1100.130655] loop3: rw=2049, want=134, limit=16 [ 1100.135344] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 1100.143401] attempt to access beyond end of device [ 1100.148337] loop3: rw=2049, want=161, limit=16 [ 1100.155058] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 1100.163459] attempt to access beyond end of device [ 1100.168394] loop3: rw=2049, want=162, limit=16 [ 1100.175922] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 1100.184671] attempt to access beyond end of device [ 1100.199122] loop3: rw=2049, want=187, limit=16 [ 1100.208381] Buffer I/O error on dev loop3, logical block 186, lost async page write [ 1100.251723] attempt to access beyond end of device [ 1100.256694] loop3: rw=2049, want=188, limit=16 [ 1100.261280] Buffer I/O error on dev loop3, logical block 187, lost async page write [ 1100.388074] attempt to access beyond end of device [ 1100.464554] loop3: rw=2049, want=189, limit=16 [ 1100.478734] attempt to access beyond end of device [ 1100.496591] attempt to access beyond end of device [ 1100.530117] loop3: rw=2049, want=190, limit=16 [ 1100.568387] loop4: rw=2049, want=46, limit=16 [ 1100.579093] attempt to access beyond end of device [ 1100.583557] attempt to access beyond end of device [ 1100.604374] attempt to access beyond end of device [ 1100.621476] loop3: rw=2049, want=191, limit=16 [ 1100.649535] loop4: rw=2049, want=47, limit=16 [ 1100.664156] loop0: rw=2049, want=226, limit=16 [ 1100.669148] attempt to access beyond end of device [ 1100.688924] attempt to access beyond end of device [ 1100.744258] loop3: rw=2049, want=192, limit=16 [ 1100.769415] loop4: rw=2049, want=51, limit=16 [ 1100.787361] attempt to access beyond end of device 10:39:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1100.834942] attempt to access beyond end of device [ 1100.842171] attempt to access beyond end of device [ 1100.847816] loop0: rw=1, want=216, limit=16 [ 1100.851454] loop3: rw=2049, want=215, limit=16 [ 1100.856809] attempt to access beyond end of device [ 1100.861820] loop3: rw=2049, want=217, limit=16 [ 1100.866443] attempt to access beyond end of device [ 1100.871463] loop3: rw=2049, want=218, limit=16 [ 1100.876149] attempt to access beyond end of device [ 1100.887449] loop3: rw=2049, want=246, limit=16 [ 1100.892199] attempt to access beyond end of device [ 1100.897162] loop3: rw=2049, want=247, limit=16 [ 1100.900015] attempt to access beyond end of device [ 1100.906704] attempt to access beyond end of device [ 1100.909862] attempt to access beyond end of device [ 1100.912009] loop3: rw=2049, want=248, limit=16 [ 1100.912052] attempt to access beyond end of device [ 1100.912061] loop3: rw=2049, want=249, limit=16 [ 1100.912093] attempt to access beyond end of device [ 1100.912103] loop3: rw=2049, want=255, limit=16 [ 1100.912315] loop4: rw=2049, want=79, limit=16 [ 1100.926422] loop5: rw=1, want=256, limit=16 [ 1100.926964] loop0: rw=1, want=217, limit=16 [ 1100.927001] attempt to access beyond end of device [ 1100.927011] loop0: rw=1, want=218, limit=16 [ 1100.927040] attempt to access beyond end of device [ 1100.927050] loop0: rw=1, want=227, limit=16 [ 1100.927078] attempt to access beyond end of device [ 1100.927088] loop0: rw=1, want=228, limit=16 [ 1100.930384] attempt to access beyond end of device [ 1100.930394] loop0: rw=1, want=229, limit=16 [ 1100.930425] attempt to access beyond end of device [ 1100.930434] loop0: rw=1, want=230, limit=16 [ 1100.930465] attempt to access beyond end of device [ 1100.930473] loop0: rw=1, want=231, limit=16 [ 1100.930503] attempt to access beyond end of device [ 1100.930512] loop0: rw=1, want=232, limit=16 [ 1100.930793] attempt to access beyond end of device [ 1100.930803] loop0: rw=1, want=256, limit=16 [ 1101.085594] attempt to access beyond end of device [ 1101.090602] loop4: rw=2049, want=117, limit=16 [ 1101.102570] attempt to access beyond end of device [ 1101.110463] loop4: rw=2049, want=119, limit=16 [ 1101.116065] attempt to access beyond end of device [ 1101.121070] loop4: rw=2049, want=146, limit=16 [ 1101.128586] attempt to access beyond end of device [ 1101.153493] attempt to access beyond end of device [ 1101.158458] loop3: rw=1, want=96, limit=16 [ 1101.167436] loop4: rw=2049, want=160, limit=16 [ 1101.175990] attempt to access beyond end of device [ 1101.184030] attempt to access beyond end of device [ 1101.193721] loop3: rw=1, want=97, limit=16 [ 1101.200275] loop4: rw=2049, want=225, limit=16 [ 1101.208573] attempt to access beyond end of device [ 1101.218446] attempt to access beyond end of device [ 1101.227012] loop3: rw=1, want=98, limit=16 [ 1101.234620] loop4: rw=2049, want=226, limit=16 [ 1101.242294] attempt to access beyond end of device [ 1101.259843] attempt to access beyond end of device [ 1101.275168] loop3: rw=1, want=99, limit=16 [ 1101.290076] loop4: rw=2049, want=227, limit=16 [ 1101.306750] attempt to access beyond end of device [ 1101.309604] attempt to access beyond end of device [ 1101.316959] loop0: rw=2049, want=64, limit=16 [ 1101.323060] attempt to access beyond end of device [ 1101.326881] attempt to access beyond end of device [ 1101.340524] loop3: rw=1, want=101, limit=16 [ 1101.353317] loop0: rw=2049, want=81, limit=16 [ 1101.359436] attempt to access beyond end of device [ 1101.360627] attempt to access beyond end of device [ 1101.364928] loop0: rw=2049, want=82, limit=16 [ 1101.372228] loop4: rw=2049, want=228, limit=16 [ 1101.374952] attempt to access beyond end of device [ 1101.383998] loop0: rw=2049, want=83, limit=16 [ 1101.384526] attempt to access beyond end of device [ 1101.388932] attempt to access beyond end of device [ 1101.398866] loop0: rw=2049, want=86, limit=16 [ 1101.400787] loop3: rw=1, want=102, limit=16 [ 1101.404521] attempt to access beyond end of device [ 1101.417426] loop0: rw=2049, want=87, limit=16 [ 1101.426270] attempt to access beyond end of device [ 1101.430924] attempt to access beyond end of device [ 1101.443990] loop4: rw=2049, want=245, limit=16 [ 1101.449810] loop3: rw=1, want=103, limit=16 [ 1101.454466] loop0: rw=2049, want=88, limit=16 [ 1101.459973] attempt to access beyond end of device [ 1101.460015] attempt to access beyond end of device [ 1101.468643] attempt to access beyond end of device [ 1101.470274] loop0: rw=2049, want=89, limit=16 [ 1101.480721] loop4: rw=2049, want=254, limit=16 [ 1101.483279] attempt to access beyond end of device [ 1101.490269] attempt to access beyond end of device [ 1101.493251] loop0: rw=2049, want=90, limit=16 [ 1101.501233] loop3: rw=1, want=104, limit=16 [ 1101.503316] attempt to access beyond end of device [ 1101.511664] loop4: rw=2049, want=255, limit=16 [ 1101.513292] attempt to access beyond end of device [ 1101.516367] attempt to access beyond end of device [ 1101.526558] loop0: rw=2049, want=91, limit=16 [ 1101.526758] loop3: rw=1, want=105, limit=16 [ 1101.538726] attempt to access beyond end of device [ 1101.548695] loop3: rw=1, want=121, limit=16 [ 1101.554941] attempt to access beyond end of device [ 1101.556508] attempt to access beyond end of device [ 1101.559940] loop0: rw=2049, want=92, limit=16 [ 1101.569902] loop4: rw=2049, want=256, limit=16 [ 1101.570105] loop3: rw=1, want=122, limit=16 [ 1101.575247] attempt to access beyond end of device [ 1101.584631] loop0: rw=2049, want=93, limit=16 [ 1101.586116] attempt to access beyond end of device [ 1101.589614] attempt to access beyond end of device [ 1101.595534] loop3: rw=1, want=123, limit=16 [ 1101.600871] loop0: rw=2049, want=94, limit=16 [ 1101.608774] attempt to access beyond end of device [ 1101.609537] attempt to access beyond end of device [ 1101.615028] loop3: rw=1, want=124, limit=16 [ 1101.618949] loop0: rw=2049, want=95, limit=16 [ 1101.628330] attempt to access beyond end of device [ 1101.630043] attempt to access beyond end of device [ 1101.634658] loop3: rw=1, want=125, limit=16 [ 1101.634699] attempt to access beyond end of device [ 1101.634709] loop3: rw=1, want=126, limit=16 [ 1101.634740] attempt to access beyond end of device [ 1101.634748] loop3: rw=1, want=127, limit=16 [ 1101.634778] attempt to access beyond end of device [ 1101.634787] loop3: rw=1, want=135, limit=16 [ 1101.634816] attempt to access beyond end of device [ 1101.634825] loop3: rw=1, want=136, limit=16 [ 1101.634912] attempt to access beyond end of device [ 1101.634922] loop3: rw=1, want=160, limit=16 [ 1101.635028] attempt to access beyond end of device [ 1101.635038] loop3: rw=1, want=186, limit=16 [ 1101.635118] attempt to access beyond end of device [ 1101.635126] loop3: rw=1, want=208, limit=16 [ 1101.635177] attempt to access beyond end of device [ 1101.635186] loop3: rw=1, want=209, limit=16 [ 1101.635215] attempt to access beyond end of device [ 1101.635224] loop3: rw=1, want=210, limit=16 [ 1101.635252] attempt to access beyond end of device [ 1101.635261] loop3: rw=1, want=211, limit=16 [ 1101.635291] attempt to access beyond end of device [ 1101.635299] loop3: rw=1, want=212, limit=16 [ 1101.635328] attempt to access beyond end of device [ 1101.635337] loop3: rw=1, want=213, limit=16 [ 1101.635366] attempt to access beyond end of device [ 1101.635375] loop3: rw=1, want=214, limit=16 [ 1101.635404] attempt to access beyond end of device [ 1101.635413] loop3: rw=1, want=216, limit=16 [ 1101.635441] attempt to access beyond end of device [ 1101.635450] loop3: rw=1, want=219, limit=16 [ 1101.635520] attempt to access beyond end of device [ 1101.635529] loop3: rw=1, want=243, limit=16 [ 1101.635584] attempt to access beyond end of device [ 1101.635593] loop3: rw=1, want=244, limit=16 [ 1101.635628] attempt to access beyond end of device [ 1101.635638] loop3: rw=1, want=245, limit=16 [ 1101.635775] attempt to access beyond end of device [ 1101.635784] loop3: rw=1, want=250, limit=16 [ 1101.635814] attempt to access beyond end of device [ 1101.635822] loop3: rw=1, want=251, limit=16 [ 1101.635851] attempt to access beyond end of device [ 1101.635860] loop3: rw=1, want=252, limit=16 [ 1101.635891] attempt to access beyond end of device [ 1101.635900] loop3: rw=1, want=253, limit=16 [ 1101.635928] attempt to access beyond end of device [ 1101.635937] loop3: rw=1, want=254, limit=16 10:39:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x0, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r3, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1101.635965] attempt to access beyond end of device [ 1101.635974] loop3: rw=1, want=256, limit=16 [ 1101.926794] loop0: rw=2049, want=102, limit=16 [ 1101.938132] attempt to access beyond end of device [ 1101.945647] loop0: rw=2049, want=127, limit=16 [ 1101.955775] attempt to access beyond end of device [ 1101.961171] attempt to access beyond end of device [ 1101.969028] loop0: rw=2049, want=128, limit=16 [ 1101.972004] loop4: rw=1, want=40, limit=16 [ 1101.978180] attempt to access beyond end of device [ 1101.991144] loop4: rw=1, want=41, limit=16 [ 1101.993183] attempt to access beyond end of device [ 1102.000439] attempt to access beyond end of device [ 1102.008188] loop0: rw=2049, want=160, limit=16 [ 1102.016957] attempt to access beyond end of device [ 1102.017370] loop4: rw=1, want=42, limit=16 [ 1102.050864] loop0: rw=2049, want=170, limit=16 [ 1102.114996] attempt to access beyond end of device [ 1102.120049] loop4: rw=1, want=43, limit=16 [ 1102.152901] attempt to access beyond end of device [ 1102.217661] attempt to access beyond end of device [ 1102.245683] attempt to access beyond end of device [ 1102.251095] loop3: rw=2049, want=32, limit=16 [ 1102.271451] loop4: rw=1, want=44, limit=16 [ 1102.276099] loop0: rw=2049, want=187, limit=16 [ 1102.282309] attempt to access beyond end of device [ 1102.292441] loop4: rw=1, want=45, limit=16 [ 1102.298682] attempt to access beyond end of device [ 1102.310572] attempt to access beyond end of device [ 1102.314430] attempt to access beyond end of device [ 1102.318802] loop3: rw=2049, want=33, limit=16 [ 1102.325829] attempt to access beyond end of device [ 1102.331115] attempt to access beyond end of device [ 1102.331425] loop4: rw=1, want=48, limit=16 [ 1102.337926] loop5: rw=2049, want=32, limit=16 [ 1102.348170] attempt to access beyond end of device [ 1102.355092] attempt to access beyond end of device [ 1102.355136] loop3: rw=2049, want=34, limit=16 [ 1102.356359] attempt to access beyond end of device [ 1102.356515] loop3: rw=2049, want=35, limit=16 [ 1102.357419] attempt to access beyond end of device [ 1102.357444] loop3: rw=2049, want=36, limit=16 [ 1102.358921] attempt to access beyond end of device [ 1102.359005] loop3: rw=2049, want=37, limit=16 [ 1102.360461] attempt to access beyond end of device [ 1102.360524] loop3: rw=2049, want=38, limit=16 [ 1102.365635] attempt to access beyond end of device [ 1102.365698] loop3: rw=2049, want=39, limit=16 [ 1102.366630] attempt to access beyond end of device [ 1102.366715] loop3: rw=2049, want=240, limit=16 [ 1102.369679] attempt to access beyond end of device [ 1102.369783] loop3: rw=2049, want=256, limit=16 [ 1102.382145] attempt to access beyond end of device [ 1102.382159] loop4: rw=1, want=49, limit=16 [ 1102.382190] attempt to access beyond end of device [ 1102.382199] loop4: rw=1, want=50, limit=16 [ 1102.382289] attempt to access beyond end of device [ 1102.382298] loop4: rw=1, want=75, limit=16 [ 1102.382355] attempt to access beyond end of device [ 1102.382364] loop4: rw=1, want=76, limit=16 [ 1102.382393] attempt to access beyond end of device [ 1102.382405] loop4: rw=1, want=77, limit=16 [ 1102.382594] attempt to access beyond end of device [ 1102.382604] loop4: rw=1, want=78, limit=16 [ 1102.382633] attempt to access beyond end of device [ 1102.382642] loop4: rw=1, want=80, limit=16 [ 1102.382670] attempt to access beyond end of device [ 1102.382679] loop4: rw=1, want=81, limit=16 [ 1102.382708] attempt to access beyond end of device [ 1102.382717] loop4: rw=1, want=82, limit=16 [ 1102.382745] attempt to access beyond end of device [ 1102.382754] loop4: rw=1, want=83, limit=16 [ 1102.382783] attempt to access beyond end of device [ 1102.382793] loop4: rw=1, want=84, limit=16 [ 1102.382875] attempt to access beyond end of device [ 1102.382884] loop4: rw=1, want=116, limit=16 [ 1102.382948] attempt to access beyond end of device [ 1102.382957] loop4: rw=1, want=118, limit=16 [ 1102.382986] attempt to access beyond end of device [ 1102.382995] loop4: rw=1, want=120, limit=16 [ 1102.383023] attempt to access beyond end of device [ 1102.383032] loop4: rw=1, want=121, limit=16 [ 1102.383060] attempt to access beyond end of device [ 1102.383068] loop4: rw=1, want=122, limit=16 [ 1102.383147] attempt to access beyond end of device [ 1102.383156] loop4: rw=1, want=123, limit=16 [ 1102.383232] attempt to access beyond end of device [ 1102.383241] loop4: rw=1, want=124, limit=16 [ 1102.383270] attempt to access beyond end of device [ 1102.383279] loop4: rw=1, want=125, limit=16 [ 1102.383307] attempt to access beyond end of device [ 1102.383316] loop4: rw=1, want=126, limit=16 [ 1102.383381] attempt to access beyond end of device [ 1102.383390] loop4: rw=1, want=142, limit=16 [ 1102.383440] attempt to access beyond end of device [ 1102.383449] loop4: rw=1, want=143, limit=16 [ 1102.383476] attempt to access beyond end of device [ 1102.383485] loop4: rw=1, want=144, limit=16 [ 1102.383515] attempt to access beyond end of device [ 1102.383523] loop4: rw=1, want=145, limit=16 [ 1102.383713] attempt to access beyond end of device [ 1102.383723] loop4: rw=1, want=147, limit=16 [ 1102.383754] attempt to access beyond end of device [ 1102.383763] loop4: rw=1, want=148, limit=16 [ 1102.383791] attempt to access beyond end of device [ 1102.383800] loop4: rw=1, want=149, limit=16 [ 1102.383828] attempt to access beyond end of device 10:39:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1102.383837] loop4: rw=1, want=150, limit=16 [ 1102.383865] attempt to access beyond end of device [ 1102.383874] loop4: rw=1, want=151, limit=16 [ 1102.383958] attempt to access beyond end of device [ 1102.383967] loop4: rw=1, want=159, limit=16 [ 1102.384078] attempt to access beyond end of device [ 1102.384087] loop4: rw=1, want=224, limit=16 [ 1102.384180] attempt to access beyond end of device [ 1102.384192] loop4: rw=1, want=244, limit=16 [ 1102.384352] attempt to access beyond end of device [ 1102.384362] loop4: rw=1, want=253, limit=16 [ 1102.387703] loop2: rw=2049, want=25, limit=16 [ 1102.389190] attempt to access beyond end of device [ 1102.389430] loop2: rw=2049, want=26, limit=16 [ 1102.390142] attempt to access beyond end of device [ 1102.390266] loop2: rw=2049, want=27, limit=16 [ 1102.391730] attempt to access beyond end of device [ 1102.391875] loop2: rw=2049, want=117, limit=16 [ 1102.393271] attempt to access beyond end of device [ 1102.393336] loop2: rw=2049, want=118, limit=16 [ 1102.398371] loop0: rw=2049, want=188, limit=16 [ 1102.412404] loop5: rw=2049, want=109, limit=16 [ 1102.422181] attempt to access beyond end of device [ 1102.427496] attempt to access beyond end of device [ 1102.460273] loop2: rw=2049, want=119, limit=16 [ 1102.462104] attempt to access beyond end of device [ 1102.462315] loop2: rw=2049, want=120, limit=16 [ 1102.463853] attempt to access beyond end of device [ 1102.464116] loop2: rw=2049, want=121, limit=16 [ 1102.466751] attempt to access beyond end of device [ 1102.466855] loop2: rw=2049, want=129, limit=16 [ 1102.467736] attempt to access beyond end of device [ 1102.467908] loop2: rw=2049, want=130, limit=16 [ 1102.468459] attempt to access beyond end of device [ 1102.468477] loop2: rw=2049, want=131, limit=16 [ 1102.481017] attempt to access beyond end of device [ 1102.481032] loop0: rw=2049, want=205, limit=16 [ 1102.481067] attempt to access beyond end of device [ 1102.481077] loop0: rw=2049, want=217, limit=16 [ 1102.481180] attempt to access beyond end of device [ 1102.481190] loop0: rw=2049, want=218, limit=16 [ 1102.482364] attempt to access beyond end of device [ 1102.482378] loop0: rw=2049, want=219, limit=16 [ 1102.482552] attempt to access beyond end of device [ 1102.482563] loop0: rw=2049, want=227, limit=16 10:39:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1102.484346] attempt to access beyond end of device [ 1102.484452] loop2: rw=2049, want=213, limit=16 [ 1102.487278] attempt to access beyond end of device [ 1102.487363] loop2: rw=2049, want=214, limit=16 [ 1102.489500] attempt to access beyond end of device [ 1102.489511] loop2: rw=2049, want=215, limit=16 [ 1102.493596] attempt to access beyond end of device [ 1102.499560] loop5: rw=2049, want=193, limit=16 [ 1102.741857] loop2: rw=2049, want=216, limit=16 [ 1102.747871] attempt to access beyond end of device [ 1102.920900] attempt to access beyond end of device [ 1102.926657] attempt to access beyond end of device [ 1103.063025] attempt to access beyond end of device [ 1103.064493] loop4: rw=2049, want=64, limit=16 [ 1103.068599] loop0: rw=1, want=80, limit=16 [ 1103.068672] attempt to access beyond end of device [ 1103.068682] loop0: rw=1, want=84, limit=16 [ 1103.068714] attempt to access beyond end of device [ 1103.068724] loop0: rw=1, want=85, limit=16 [ 1103.068753] attempt to access beyond end of device [ 1103.068762] loop0: rw=1, want=96, limit=16 [ 1103.068790] attempt to access beyond end of device [ 1103.068799] loop0: rw=1, want=97, limit=16 [ 1103.068829] attempt to access beyond end of device [ 1103.068838] loop0: rw=1, want=98, limit=16 [ 1103.068873] attempt to access beyond end of device [ 1103.068882] loop0: rw=1, want=99, limit=16 [ 1103.068911] attempt to access beyond end of device [ 1103.068920] loop0: rw=1, want=100, limit=16 [ 1103.068949] attempt to access beyond end of device [ 1103.068958] loop0: rw=1, want=101, limit=16 [ 1103.069035] attempt to access beyond end of device [ 1103.069044] loop0: rw=1, want=126, limit=16 [ 1103.069128] attempt to access beyond end of device [ 1103.069136] loop0: rw=1, want=152, limit=16 [ 1103.069189] attempt to access beyond end of device [ 1103.069197] loop0: rw=1, want=153, limit=16 [ 1103.069227] attempt to access beyond end of device [ 1103.069235] loop0: rw=1, want=154, limit=16 [ 1103.069264] attempt to access beyond end of device [ 1103.069273] loop0: rw=1, want=155, limit=16 [ 1103.069303] attempt to access beyond end of device [ 1103.069312] loop0: rw=1, want=156, limit=16 [ 1103.069340] attempt to access beyond end of device [ 1103.069349] loop0: rw=1, want=157, limit=16 [ 1103.069377] attempt to access beyond end of device [ 1103.069386] loop0: rw=1, want=158, limit=16 [ 1103.069414] attempt to access beyond end of device [ 1103.069423] loop0: rw=1, want=159, limit=16 [ 1103.069452] attempt to access beyond end of device [ 1103.069461] loop0: rw=1, want=161, limit=16 [ 1103.069519] attempt to access beyond end of device [ 1103.069528] loop0: rw=1, want=169, limit=16 [ 1103.069594] attempt to access beyond end of device [ 1103.069603] loop0: rw=1, want=186, limit=16 [ 1103.069693] attempt to access beyond end of device [ 1103.069702] loop0: rw=1, want=204, limit=16 [ 1103.069762] attempt to access beyond end of device [ 1103.069772] loop0: rw=1, want=213, limit=16 [ 1103.069818] attempt to access beyond end of device [ 1103.069827] loop0: rw=1, want=214, limit=16 [ 1103.069857] attempt to access beyond end of device [ 1103.069871] loop0: rw=1, want=215, limit=16 [ 1103.069900] attempt to access beyond end of device [ 1103.069908] loop0: rw=1, want=216, limit=16 [ 1103.069937] attempt to access beyond end of device [ 1103.069946] loop0: rw=1, want=233, limit=16 [ 1103.069973] attempt to access beyond end of device [ 1103.069982] loop0: rw=1, want=234, limit=16 [ 1103.070011] attempt to access beyond end of device [ 1103.070020] loop0: rw=1, want=235, limit=16 [ 1103.070048] attempt to access beyond end of device [ 1103.070056] loop0: rw=1, want=236, limit=16 [ 1103.070085] attempt to access beyond end of device [ 1103.070094] loop0: rw=1, want=237, limit=16 [ 1103.070137] attempt to access beyond end of device [ 1103.070146] loop0: rw=1, want=238, limit=16 [ 1103.070175] attempt to access beyond end of device [ 1103.070184] loop0: rw=1, want=239, limit=16 [ 1103.070212] attempt to access beyond end of device [ 1103.070221] loop0: rw=1, want=241, limit=16 [ 1103.070249] attempt to access beyond end of device [ 1103.070258] loop0: rw=1, want=242, limit=16 [ 1103.070286] attempt to access beyond end of device [ 1103.070295] loop0: rw=1, want=243, limit=16 [ 1103.070325] attempt to access beyond end of device [ 1103.070333] loop0: rw=1, want=244, limit=16 [ 1103.070362] attempt to access beyond end of device [ 1103.070370] loop0: rw=1, want=245, limit=16 [ 1103.070398] attempt to access beyond end of device [ 1103.070407] loop0: rw=1, want=246, limit=16 [ 1103.070464] attempt to access beyond end of device [ 1103.070474] loop0: rw=1, want=254, limit=16 [ 1103.070520] attempt to access beyond end of device [ 1103.070528] loop0: rw=1, want=256, limit=16 [ 1103.070557] attempt to access beyond end of device [ 1103.070565] loop0: rw=1, want=257, limit=16 [ 1103.070593] attempt to access beyond end of device [ 1103.070602] loop0: rw=1, want=258, limit=16 [ 1103.070630] attempt to access beyond end of device [ 1103.070638] loop0: rw=1, want=259, limit=16 [ 1103.070667] attempt to access beyond end of device [ 1103.070676] loop0: rw=1, want=260, limit=16 [ 1103.070703] attempt to access beyond end of device [ 1103.070712] loop0: rw=1, want=261, limit=16 [ 1103.070783] attempt to access beyond end of device [ 1103.070792] loop0: rw=1, want=228, limit=16 [ 1103.146056] loop5: rw=2049, want=194, limit=16 [ 1103.152774] attempt to access beyond end of device [ 1103.154478] attempt to access beyond end of device [ 1103.164736] loop4: rw=2049, want=160, limit=16 [ 1103.176506] loop5: rw=2049, want=195, limit=16 [ 1103.176559] attempt to access beyond end of device [ 1103.176569] loop5: rw=2049, want=196, limit=16 [ 1103.176603] attempt to access beyond end of device [ 1103.176613] loop5: rw=2049, want=197, limit=16 [ 1103.176647] attempt to access beyond end of device [ 1103.176656] loop5: rw=2049, want=198, limit=16 [ 1103.176690] attempt to access beyond end of device [ 1103.176699] loop5: rw=2049, want=199, limit=16 [ 1103.176732] attempt to access beyond end of device [ 1103.176741] loop5: rw=2049, want=248, limit=16 [ 1103.177069] loop2: rw=2049, want=217, limit=16 [ 1103.177110] attempt to access beyond end of device [ 1103.177119] loop2: rw=2049, want=218, limit=16 [ 1103.181542] attempt to access beyond end of device [ 1103.181555] loop3: rw=1, want=239, limit=16 [ 1103.837187] attempt to access beyond end of device [ 1103.842778] loop4: rw=2049, want=193, limit=16 [ 1103.847413] attempt to access beyond end of device [ 1103.853364] loop4: rw=2049, want=194, limit=16 [ 1103.857998] attempt to access beyond end of device 10:39:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r3, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1103.863965] loop4: rw=2049, want=195, limit=16 [ 1103.868598] attempt to access beyond end of device [ 1103.874447] loop4: rw=2049, want=196, limit=16 [ 1103.879088] attempt to access beyond end of device [ 1103.885230] loop4: rw=2049, want=197, limit=16 [ 1103.892246] attempt to access beyond end of device [ 1103.897189] loop4: rw=2049, want=198, limit=16 [ 1103.917553] attempt to access beyond end of device [ 1103.923183] attempt to access beyond end of device [ 1103.923225] attempt to access beyond end of device [ 1103.928121] loop5: rw=1, want=88, limit=16 [ 1103.942110] loop4: rw=2049, want=199, limit=16 [ 1103.952057] attempt to access beyond end of device [ 1103.957209] attempt to access beyond end of device [ 1103.963664] loop4: rw=2049, want=225, limit=16 [ 1103.968380] loop5: rw=1, want=89, limit=16 [ 1103.974848] attempt to access beyond end of device [ 1103.979995] attempt to access beyond end of device [ 1104.018509] loop4: rw=2049, want=226, limit=16 [ 1104.029505] loop5: rw=1, want=90, limit=16 [ 1104.029911] loop2: rw=1, want=115, limit=16 [ 1104.050791] attempt to access beyond end of device [ 1104.062713] attempt to access beyond end of device [ 1104.066356] attempt to access beyond end of device [ 1104.090849] loop4: rw=2049, want=255, limit=16 [ 1104.102559] loop5: rw=1, want=91, limit=16 [ 1104.108519] loop2: rw=1, want=116, limit=16 [ 1104.124074] attempt to access beyond end of device [ 1104.128655] attempt to access beyond end of device [ 1104.136169] attempt to access beyond end of device 10:39:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1104.139842] loop2: rw=1, want=132, limit=16 [ 1104.141569] attempt to access beyond end of device [ 1104.159788] attempt to access beyond end of device [ 1104.168187] loop5: rw=1, want=92, limit=16 [ 1104.173068] loop3: rw=2049, want=48, limit=16 [ 1104.174683] loop2: rw=1, want=133, limit=16 [ 1104.178879] loop4: rw=2049, want=256, limit=16 [ 1104.194626] attempt to access beyond end of device [ 1104.201655] attempt to access beyond end of device [ 1104.202119] attempt to access beyond end of device [ 1104.208573] attempt to access beyond end of device [ 1104.216968] loop5: rw=1, want=93, limit=16 [ 1104.221679] loop4: rw=2049, want=257, limit=16 [ 1104.226390] loop3: rw=2049, want=105, limit=16 [ 1104.228676] loop2: rw=1, want=134, limit=16 [ 1104.232849] attempt to access beyond end of device [ 1104.247566] attempt to access beyond end of device [ 1104.253135] attempt to access beyond end of device [ 1104.253147] loop5: rw=1, want=110, limit=16 [ 1104.253211] attempt to access beyond end of device [ 1104.253224] loop5: rw=1, want=111, limit=16 [ 1104.265008] loop3: rw=2049, want=106, limit=16 [ 1104.278157] loop4: rw=2049, want=258, limit=16 [ 1104.283618] attempt to access beyond end of device [ 1104.289526] attempt to access beyond end of device [ 1104.291446] attempt to access beyond end of device [ 1104.296751] loop4: rw=2049, want=259, limit=16 [ 1104.304847] loop3: rw=2049, want=107, limit=16 [ 1104.328534] attempt to access beyond end of device [ 1104.336083] attempt to access beyond end of device [ 1104.342603] loop2: rw=1, want=135, limit=16 [ 1104.347130] attempt to access beyond end of device [ 1104.353592] loop5: rw=1, want=112, limit=16 [ 1104.361881] attempt to access beyond end of device [ 1104.370400] attempt to access beyond end of device [ 1104.371780] loop3: rw=2049, want=108, limit=16 [ 1104.381939] loop2: rw=1, want=136, limit=16 [ 1104.388248] loop4: rw=2049, want=260, limit=16 [ 1104.394318] loop5: rw=1, want=192, limit=16 [ 1104.405116] attempt to access beyond end of device [ 1104.405224] attempt to access beyond end of device [ 1104.419870] attempt to access beyond end of device [ 1104.425563] attempt to access beyond end of device [ 1104.426205] loop2: rw=1, want=137, limit=16 [ 1104.430803] attempt to access beyond end of device [ 1104.440625] loop5: rw=1, want=247, limit=16 [ 1104.442446] loop4: rw=2049, want=261, limit=16 [ 1104.447307] attempt to access beyond end of device [ 1104.450160] loop3: rw=2049, want=109, limit=16 [ 1104.459277] attempt to access beyond end of device [ 1104.460142] loop0: rw=2049, want=48, limit=16 [ 1104.469996] attempt to access beyond end of device [ 1104.478875] attempt to access beyond end of device [ 1104.484526] loop3: rw=2049, want=110, limit=16 [ 1104.489561] loop0: rw=2049, want=102, limit=16 10:39:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x0, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1104.501278] attempt to access beyond end of device [ 1104.507918] attempt to access beyond end of device [ 1104.515008] loop5: rw=1, want=256, limit=16 [ 1104.515108] loop3: rw=2049, want=111, limit=16 [ 1104.524597] loop0: rw=2049, want=207, limit=16 [ 1104.530380] attempt to access beyond end of device [ 1104.537134] loop3: rw=2049, want=144, limit=16 [ 1104.538835] loop2: rw=1, want=138, limit=16 [ 1104.553110] attempt to access beyond end of device [ 1104.555958] attempt to access beyond end of device [ 1104.566953] loop3: rw=2049, want=216, limit=16 [ 1104.569068] attempt to access beyond end of device [ 1104.573931] loop2: rw=1, want=210, limit=16 [ 1104.584642] attempt to access beyond end of device [ 1104.589649] loop4: rw=1, want=144, limit=16 10:39:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1104.608969] attempt to access beyond end of device [ 1104.621980] loop2: rw=1, want=211, limit=16 [ 1104.638641] attempt to access beyond end of device [ 1104.646058] loop4: rw=1, want=192, limit=16 [ 1104.659340] attempt to access beyond end of device [ 1104.664681] loop0: rw=1, want=88, limit=16 [ 1104.668538] loop2: rw=1, want=212, limit=16 [ 1104.678367] attempt to access beyond end of device [ 1104.691698] attempt to access beyond end of device [ 1104.715999] attempt to access beyond end of device [ 1104.723367] loop4: rw=1, want=223, limit=16 [ 1104.747199] loop0: rw=1, want=89, limit=16 [ 1104.758656] attempt to access beyond end of device [ 1104.767493] loop2: rw=1, want=219, limit=16 10:39:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1104.788750] attempt to access beyond end of device [ 1104.812053] attempt to access beyond end of device [ 1104.819426] loop4: rw=1, want=224, limit=16 [ 1104.844696] loop0: rw=1, want=90, limit=16 [ 1104.852719] attempt to access beyond end of device [ 1104.853729] attempt to access beyond end of device [ 1104.857910] attempt to access beyond end of device [ 1104.870589] loop2: rw=1, want=220, limit=16 [ 1104.875780] attempt to access beyond end of device [ 1104.879487] loop3: rw=1, want=104, limit=16 [ 1104.880883] attempt to access beyond end of device [ 1104.892242] loop5: rw=2049, want=32, limit=16 [ 1104.896961] loop4: rw=1, want=227, limit=16 [ 1104.902911] loop0: rw=1, want=91, limit=16 [ 1104.908446] attempt to access beyond end of device [ 1104.915281] attempt to access beyond end of device [ 1104.920399] loop2: rw=1, want=221, limit=16 [ 1104.926235] attempt to access beyond end of device [ 1104.932168] attempt to access beyond end of device [ 1104.937245] loop4: rw=1, want=228, limit=16 [ 1104.942970] attempt to access beyond end of device [ 1104.948268] loop5: rw=2049, want=33, limit=16 [ 1104.954775] loop0: rw=1, want=92, limit=16 [ 1104.959155] loop3: rw=1, want=143, limit=16 [ 1104.965117] attempt to access beyond end of device [ 1104.972216] attempt to access beyond end of device [ 1104.977418] loop2: rw=1, want=222, limit=16 [ 1104.983249] buffer_io_error: 247 callbacks suppressed [ 1104.983258] Buffer I/O error on dev loop0, logical block 91, lost async page write [ 1104.997857] attempt to access beyond end of device [ 1105.003723] loop4: rw=1, want=229, limit=16 [ 1105.008166] Buffer I/O error on dev loop2, logical block 221, lost async page write [ 1105.017658] loop5: rw=2049, want=34, limit=16 [ 1105.024616] Buffer I/O error on dev loop4, logical block 228, lost async page write [ 1105.035351] loop3: rw=1, want=208, limit=16 [ 1105.039990] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1105.049924] attempt to access beyond end of device [ 1105.055922] attempt to access beyond end of device [ 1105.061807] attempt to access beyond end of device [ 1105.067989] attempt to access beyond end of device [ 1105.075561] loop2: rw=1, want=223, limit=16 [ 1105.083209] attempt to access beyond end of device [ 1105.089458] loop3: rw=1, want=248, limit=16 [ 1105.097412] loop0: rw=1, want=93, limit=16 [ 1105.104065] loop4: rw=1, want=230, limit=16 [ 1105.108496] Buffer I/O error on dev loop2, logical block 222, lost async page write [ 1105.117868] attempt to access beyond end of device [ 1105.124327] loop5: rw=2049, want=35, limit=16 [ 1105.133105] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 1105.143722] Buffer I/O error on dev loop4, logical block 229, lost async page write [ 1105.154130] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1105.163168] loop3: rw=1, want=258, limit=16 [ 1105.169863] attempt to access beyond end of device [ 1105.179396] attempt to access beyond end of device [ 1105.188107] attempt to access beyond end of device [ 1105.194454] loop2: rw=1, want=224, limit=16 [ 1105.200739] attempt to access beyond end of device [ 1105.210075] loop0: rw=1, want=94, limit=16 [ 1105.217442] loop4: rw=1, want=231, limit=16 [ 1105.223475] Buffer I/O error on dev loop2, logical block 223, lost async page write [ 1105.234183] loop5: rw=2049, want=36, limit=16 [ 1105.242975] Buffer I/O error on dev loop0, logical block 93, lost async page write [ 1105.265580] attempt to access beyond end of device [ 1105.283914] attempt to access beyond end of device [ 1105.299278] attempt to access beyond end of device [ 1105.306235] loop4: rw=1, want=232, limit=16 [ 1105.319683] attempt to access beyond end of device [ 1105.329732] loop5: rw=2049, want=62, limit=16 [ 1105.360575] loop2: rw=1, want=256, limit=16 [ 1105.369196] attempt to access beyond end of device [ 1105.391258] loop0: rw=1, want=103, limit=16 [ 1105.404683] attempt to access beyond end of device [ 1105.415498] loop4: rw=1, want=233, limit=16 [ 1105.419987] attempt to access beyond end of device [ 1105.427726] loop4: rw=1, want=249, limit=16 [ 1105.432822] attempt to access beyond end of device [ 1105.440633] loop5: rw=2049, want=63, limit=16 [ 1105.449135] loop0: rw=1, want=104, limit=16 10:39:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r3, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1105.463381] attempt to access beyond end of device [ 1105.475386] attempt to access beyond end of device [ 1105.482392] loop5: rw=2049, want=64, limit=16 [ 1105.489656] loop0: rw=1, want=192, limit=16 [ 1105.502378] attempt to access beyond end of device [ 1105.518588] attempt to access beyond end of device [ 1105.531321] loop5: rw=2049, want=65, limit=16 [ 1105.538321] attempt to access beyond end of device [ 1105.545261] loop0: rw=1, want=193, limit=16 [ 1105.551957] attempt to access beyond end of device [ 1105.560609] loop3: rw=2049, want=59, limit=16 [ 1105.565758] attempt to access beyond end of device [ 1105.575602] loop5: rw=2049, want=97, limit=16 [ 1105.591091] loop0: rw=1, want=194, limit=16 [ 1105.599987] attempt to access beyond end of device [ 1105.615977] attempt to access beyond end of device [ 1105.624493] loop5: rw=2049, want=124, limit=16 [ 1105.629589] attempt to access beyond end of device [ 1105.629733] loop3: rw=2049, want=99, limit=16 [ 1105.630449] attempt to access beyond end of device [ 1105.630598] loop3: rw=2049, want=100, limit=16 [ 1105.632136] attempt to access beyond end of device [ 1105.651070] loop0: rw=1, want=195, limit=16 [ 1105.689880] attempt to access beyond end of device [ 1105.715816] attempt to access beyond end of device [ 1105.780604] loop5: rw=2049, want=125, limit=16 [ 1105.781959] attempt to access beyond end of device [ 1105.792905] attempt to access beyond end of device [ 1105.798245] loop2: rw=2049, want=40, limit=16 [ 1105.799870] loop0: rw=1, want=196, limit=16 [ 1105.803379] loop4: rw=2049, want=25, limit=16 [ 1105.814009] attempt to access beyond end of device [ 1105.819283] loop3: rw=2049, want=101, limit=16 [ 1105.824715] loop2: rw=2049, want=89, limit=16 [ 1105.830024] attempt to access beyond end of device [ 1105.830068] attempt to access beyond end of device [ 1105.840595] loop3: rw=2049, want=102, limit=16 [ 1105.843662] attempt to access beyond end of device [ 1105.845773] attempt to access beyond end of device [ 1105.852320] attempt to access beyond end of device [ 1105.856023] loop3: rw=2049, want=103, limit=16 [ 1105.865997] attempt to access beyond end of device [ 1105.870153] loop4: rw=2049, want=45, limit=16 [ 1105.871256] loop3: rw=2049, want=134, limit=16 [ 1105.871642] attempt to access beyond end of device [ 1105.879743] attempt to access beyond end of device [ 1105.881823] loop3: rw=2049, want=135, limit=16 [ 1105.890474] loop4: rw=2049, want=46, limit=16 [ 1105.893677] attempt to access beyond end of device [ 1105.898502] attempt to access beyond end of device [ 1105.911186] loop2: rw=2049, want=90, limit=16 [ 1105.912907] loop4: rw=2049, want=47, limit=16 [ 1105.916040] loop0: rw=1, want=197, limit=16 [ 1105.923961] attempt to access beyond end of device [ 1105.927574] loop5: rw=2049, want=126, limit=16 [ 1105.933158] loop4: rw=2049, want=48, limit=16 [ 1105.936999] attempt to access beyond end of device [ 1105.937163] loop3: rw=2049, want=136, limit=16 [ 1105.939575] attempt to access beyond end of device [ 1105.939659] loop3: rw=2049, want=176, limit=16 [ 1105.940846] attempt to access beyond end of device [ 1105.944277] loop3: rw=2049, want=185, limit=16 [ 1105.944709] attempt to access beyond end of device [ 1105.944775] loop3: rw=2049, want=218, limit=16 [ 1105.946688] attempt to access beyond end of device [ 1105.946852] loop3: rw=2049, want=219, limit=16 [ 1105.948023] attempt to access beyond end of device [ 1105.948086] loop3: rw=2049, want=220, limit=16 [ 1105.949298] attempt to access beyond end of device [ 1105.949363] loop3: rw=2049, want=221, limit=16 [ 1105.950312] attempt to access beyond end of device [ 1105.950377] loop3: rw=2049, want=222, limit=16 [ 1105.957129] attempt to access beyond end of device [ 1105.957314] loop3: rw=2049, want=223, limit=16 [ 1105.958534] attempt to access beyond end of device [ 1105.958561] loop2: rw=2049, want=98, limit=16 [ 1105.959481] attempt to access beyond end of device [ 1105.959567] loop3: rw=2049, want=224, limit=16 [ 1105.960745] attempt to access beyond end of device [ 1105.960791] loop2: rw=2049, want=156, limit=16 [ 1105.962072] attempt to access beyond end of device [ 1105.962251] loop2: rw=2049, want=181, limit=16 [ 1105.962967] attempt to access beyond end of device [ 1105.962993] loop2: rw=2049, want=182, limit=16 [ 1105.964301] attempt to access beyond end of device [ 1105.964365] loop2: rw=2049, want=183, limit=16 [ 1105.965788] attempt to access beyond end of device [ 1105.965872] loop2: rw=2049, want=184, limit=16 [ 1105.968267] attempt to access beyond end of device [ 1105.968351] loop2: rw=2049, want=220, limit=16 [ 1105.969404] attempt to access beyond end of device [ 1105.969488] loop2: rw=2049, want=221, limit=16 [ 1105.980521] attempt to access beyond end of device [ 1106.002645] attempt to access beyond end of device [ 1106.013193] attempt to access beyond end of device [ 1106.032277] loop4: rw=2049, want=49, limit=16 [ 1106.037217] attempt to access beyond end of device [ 1106.037229] loop0: rw=1, want=198, limit=16 [ 1106.037260] attempt to access beyond end of device [ 1106.037269] loop0: rw=1, want=199, limit=16 [ 1106.037300] attempt to access beyond end of device [ 1106.037309] loop0: rw=1, want=208, limit=16 [ 1106.037398] attempt to access beyond end of device [ 1106.037408] loop0: rw=1, want=232, limit=16 [ 1106.037464] attempt to access beyond end of device [ 1106.037474] loop0: rw=1, want=233, limit=16 [ 1106.037503] attempt to access beyond end of device [ 1106.037512] loop0: rw=1, want=234, limit=16 [ 1106.037540] attempt to access beyond end of device [ 1106.037549] loop0: rw=1, want=235, limit=16 [ 1106.037579] attempt to access beyond end of device [ 1106.037587] loop0: rw=1, want=237, limit=16 [ 1106.037615] attempt to access beyond end of device [ 1106.037625] loop0: rw=1, want=238, limit=16 [ 1106.037654] attempt to access beyond end of device [ 1106.037669] loop0: rw=1, want=239, limit=16 [ 1106.037697] attempt to access beyond end of device [ 1106.037707] loop0: rw=1, want=240, limit=16 10:39:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1106.037735] attempt to access beyond end of device [ 1106.037744] loop0: rw=1, want=241, limit=16 [ 1106.037810] attempt to access beyond end of device [ 1106.037819] loop0: rw=1, want=257, limit=16 [ 1106.090676] loop5: rw=2049, want=127, limit=16 [ 1106.096417] attempt to access beyond end of device [ 1106.131405] loop2: rw=2049, want=222, limit=16 [ 1106.136234] loop4: rw=2049, want=50, limit=16 [ 1106.158792] attempt to access beyond end of device [ 1106.158808] loop5: rw=2049, want=128, limit=16 10:39:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r3, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1106.158844] attempt to access beyond end of device [ 1106.158854] loop5: rw=2049, want=159, limit=16 [ 1106.158889] attempt to access beyond end of device [ 1106.158898] loop5: rw=2049, want=160, limit=16 [ 1106.158961] attempt to access beyond end of device [ 1106.158971] loop5: rw=2049, want=187, limit=16 [ 1106.159004] attempt to access beyond end of device [ 1106.159013] loop5: rw=2049, want=188, limit=16 [ 1106.159047] attempt to access beyond end of device [ 1106.159057] loop5: rw=2049, want=189, limit=16 [ 1106.159089] attempt to access beyond end of device [ 1106.159098] loop5: rw=2049, want=190, limit=16 [ 1106.159131] attempt to access beyond end of device [ 1106.159140] loop5: rw=2049, want=191, limit=16 [ 1106.159174] attempt to access beyond end of device [ 1106.159183] loop5: rw=2049, want=222, limit=16 [ 1106.159216] attempt to access beyond end of device [ 1106.159225] loop5: rw=2049, want=223, limit=16 [ 1106.159257] attempt to access beyond end of device [ 1106.159266] loop5: rw=2049, want=224, limit=16 [ 1106.160710] attempt to access beyond end of device [ 1106.174258] loop2: rw=2049, want=251, limit=16 [ 1106.185814] attempt to access beyond end of device [ 1106.264038] attempt to access beyond end of device [ 1106.264646] loop2: rw=2049, want=252, limit=16 [ 1106.270292] attempt to access beyond end of device [ 1106.270376] loop2: rw=2049, want=253, limit=16 [ 1106.276896] attempt to access beyond end of device [ 1106.277155] loop2: rw=2049, want=254, limit=16 [ 1106.280500] attempt to access beyond end of device [ 1106.286537] loop2: rw=2049, want=255, limit=16 [ 1106.288218] loop4: rw=2049, want=51, limit=16 [ 1106.352897] attempt to access beyond end of device [ 1106.356099] loop2: rw=2049, want=256, limit=16 [ 1106.417963] attempt to access beyond end of device [ 1106.421247] attempt to access beyond end of device [ 1106.457034] loop0: rw=2049, want=43, limit=16 [ 1106.458798] loop4: rw=2049, want=81, limit=16 [ 1106.458853] attempt to access beyond end of device [ 1106.491508] attempt to access beyond end of device [ 1106.493025] loop4: rw=2049, want=84, limit=16 [ 1106.498606] loop3: rw=1, want=48, limit=16 [ 1106.502164] attempt to access beyond end of device [ 1106.502176] loop4: rw=2049, want=115, limit=16 [ 1106.502208] attempt to access beyond end of device [ 1106.517113] attempt to access beyond end of device [ 1106.531465] attempt to access beyond end of device [ 1106.543142] attempt to access beyond end of device [ 1106.560940] loop2: rw=1, want=88, limit=16 [ 1106.572569] loop5: rw=1, want=60, limit=16 [ 1106.575283] attempt to access beyond end of device [ 1106.582911] attempt to access beyond end of device [ 1106.600963] loop0: rw=2049, want=44, limit=16 [ 1106.608229] loop5: rw=1, want=61, limit=16 [ 1106.618801] loop4: rw=2049, want=116, limit=16 [ 1106.624093] attempt to access beyond end of device [ 1106.627392] attempt to access beyond end of device [ 1106.633615] loop5: rw=1, want=66, limit=16 [ 1106.636992] attempt to access beyond end of device [ 1106.643799] attempt to access beyond end of device [ 1106.659878] loop2: rw=1, want=91, limit=16 [ 1106.666363] loop5: rw=1, want=67, limit=16 [ 1106.670124] attempt to access beyond end of device 10:39:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1106.682029] attempt to access beyond end of device [ 1106.685051] attempt to access beyond end of device [ 1106.688927] loop5: rw=1, want=68, limit=16 [ 1106.694237] loop4: rw=2049, want=117, limit=16 [ 1106.706301] loop3: rw=1, want=49, limit=16 [ 1106.709267] loop0: rw=2049, want=51, limit=16 [ 1106.716217] attempt to access beyond end of device [ 1106.720446] loop2: rw=1, want=92, limit=16 [ 1106.725627] attempt to access beyond end of device [ 1106.729387] attempt to access beyond end of device [ 1106.740919] loop5: rw=1, want=69, limit=16 [ 1106.745638] attempt to access beyond end of device [ 1106.752469] attempt to access beyond end of device [ 1106.756520] attempt to access beyond end of device [ 1106.761835] loop3: rw=1, want=50, limit=16 [ 1106.764177] loop4: rw=2049, want=118, limit=16 [ 1106.769814] attempt to access beyond end of device [ 1106.773427] loop2: rw=1, want=93, limit=16 [ 1106.778820] loop5: rw=1, want=70, limit=16 [ 1106.789182] loop0: rw=2049, want=52, limit=16 [ 1106.805790] loop3: rw=1, want=51, limit=16 [ 1106.808600] attempt to access beyond end of device [ 1106.816783] attempt to access beyond end of device [ 1106.820524] attempt to access beyond end of device [ 1106.831468] attempt to access beyond end of device [ 1106.837181] loop4: rw=2049, want=119, limit=16 [ 1106.842335] loop5: rw=1, want=71, limit=16 [ 1106.847994] attempt to access beyond end of device [ 1106.848505] loop3: rw=1, want=60, limit=16 [ 1106.858317] attempt to access beyond end of device [ 1106.871336] attempt to access beyond end of device [ 1106.875449] loop0: rw=2049, want=61, limit=16 [ 1106.881823] loop5: rw=1, want=72, limit=16 [ 1106.886232] loop2: rw=1, want=94, limit=16 [ 1106.898355] attempt to access beyond end of device [ 1106.900708] attempt to access beyond end of device [ 1106.905820] loop4: rw=2049, want=120, limit=16 [ 1106.913599] attempt to access beyond end of device [ 1106.914752] attempt to access beyond end of device [ 1106.921786] loop0: rw=2049, want=66, limit=16 [ 1106.929566] loop3: rw=1, want=61, limit=16 [ 1106.939613] loop2: rw=1, want=95, limit=16 [ 1106.944911] attempt to access beyond end of device [ 1106.947588] attempt to access beyond end of device [ 1106.950759] loop5: rw=1, want=96, limit=16 [ 1106.966801] attempt to access beyond end of device [ 1106.973846] loop4: rw=2049, want=153, limit=16 [ 1106.984234] loop0: rw=2049, want=71, limit=16 [ 1106.986280] attempt to access beyond end of device [ 1106.991906] attempt to access beyond end of device [ 1106.995606] loop4: rw=2049, want=178, limit=16 [ 1107.021812] attempt to access beyond end of device [ 1107.028948] attempt to access beyond end of device [ 1107.034316] loop2: rw=1, want=96, limit=16 [ 1107.047254] loop5: rw=1, want=121, limit=16 [ 1107.051108] loop3: rw=1, want=62, limit=16 [ 1107.056573] attempt to access beyond end of device [ 1107.058065] attempt to access beyond end of device [ 1107.068240] loop5: rw=1, want=122, limit=16 [ 1107.077272] attempt to access beyond end of device [ 1107.088201] loop3: rw=1, want=63, limit=16 [ 1107.089078] loop5: rw=1, want=123, limit=16 [ 1107.098209] attempt to access beyond end of device [ 1107.100481] attempt to access beyond end of device [ 1107.107720] attempt to access beyond end of device [ 1107.111501] attempt to access beyond end of device [ 1107.114386] loop0: rw=2049, want=80, limit=16 [ 1107.124845] loop2: rw=1, want=97, limit=16 [ 1107.131793] loop4: rw=2049, want=179, limit=16 [ 1107.132430] loop3: rw=1, want=64, limit=16 [ 1107.141802] attempt to access beyond end of device [ 1107.145203] attempt to access beyond end of device [ 1107.149022] attempt to access beyond end of device [ 1107.153312] loop5: rw=1, want=129, limit=16 [ 1107.158885] attempt to access beyond end of device [ 1107.167677] loop0: rw=2049, want=105, limit=16 [ 1107.168988] loop4: rw=2049, want=180, limit=16 [ 1107.174646] loop2: rw=1, want=99, limit=16 [ 1107.179857] attempt to access beyond end of device [ 1107.183668] attempt to access beyond end of device [ 1107.189720] loop5: rw=1, want=130, limit=16 [ 1107.194733] loop3: rw=1, want=96, limit=16 [ 1107.197191] attempt to access beyond end of device [ 1107.200239] attempt to access beyond end of device [ 1107.208499] attempt to access beyond end of device [ 1107.215497] attempt to access beyond end of device [ 1107.220432] loop3: rw=1, want=97, limit=16 [ 1107.222707] loop5: rw=1, want=131, limit=16 [ 1107.225647] loop0: rw=2049, want=106, limit=16 [ 1107.230180] loop4: rw=2049, want=189, limit=16 [ 1107.235615] loop2: rw=1, want=155, limit=16 [ 1107.241295] attempt to access beyond end of device [ 1107.247281] attempt to access beyond end of device [ 1107.250875] loop5: rw=1, want=132, limit=16 [ 1107.254242] attempt to access beyond end of device [ 1107.257505] attempt to access beyond end of device [ 1107.266745] attempt to access beyond end of device [ 1107.269313] attempt to access beyond end of device [ 1107.275461] loop3: rw=1, want=98, limit=16 [ 1107.280677] loop5: rw=1, want=133, limit=16 [ 1107.284022] loop2: rw=1, want=180, limit=16 [ 1107.287206] loop4: rw=2049, want=197, limit=16 [ 1107.290152] attempt to access beyond end of device [ 1107.300404] attempt to access beyond end of device [ 1107.305184] loop0: rw=2049, want=134, limit=16 [ 1107.309825] attempt to access beyond end of device [ 1107.309969] attempt to access beyond end of device [ 1107.319322] loop5: rw=1, want=134, limit=16 [ 1107.320129] attempt to access beyond end of device [ 1107.327860] loop4: rw=2049, want=199, limit=16 [ 1107.334678] loop2: rw=1, want=208, limit=16 [ 1107.338884] attempt to access beyond end of device [ 1107.339142] attempt to access beyond end of device [ 1107.348671] attempt to access beyond end of device [ 1107.354102] loop0: rw=2049, want=135, limit=16 [ 1107.354152] attempt to access beyond end of device [ 1107.354161] loop0: rw=2049, want=136, limit=16 [ 1107.354194] attempt to access beyond end of device [ 1107.361079] loop5: rw=1, want=158, limit=16 [ 1107.365628] loop3: rw=1, want=104, limit=16 [ 1107.371800] attempt to access beyond end of device [ 1107.378433] loop2: rw=1, want=209, limit=16 [ 1107.380143] loop4: rw=2049, want=222, limit=16 [ 1107.388916] attempt to access beyond end of device [ 1107.397411] loop5: rw=1, want=184, limit=16 [ 1107.398584] attempt to access beyond end of device [ 1107.408404] attempt to access beyond end of device [ 1107.414053] loop0: rw=2049, want=150, limit=16 [ 1107.422570] loop5: rw=1, want=185, limit=16 [ 1107.425737] loop3: rw=1, want=105, limit=16 [ 1107.432620] attempt to access beyond end of device [ 1107.434851] attempt to access beyond end of device [ 1107.443268] loop5: rw=1, want=186, limit=16 [ 1107.446298] attempt to access beyond end of device [ 1107.452655] attempt to access beyond end of device [ 1107.452667] loop5: rw=1, want=192, limit=16 [ 1107.452693] attempt to access beyond end of device [ 1107.452701] loop5: rw=1, want=193, limit=16 [ 1107.452730] attempt to access beyond end of device [ 1107.452738] loop5: rw=1, want=194, limit=16 [ 1107.452764] attempt to access beyond end of device [ 1107.465381] loop2: rw=1, want=210, limit=16 [ 1107.478293] loop5: rw=1, want=195, limit=16 10:39:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x0, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1107.486246] loop3: rw=1, want=106, limit=16 [ 1107.491772] attempt to access beyond end of device [ 1107.491785] loop5: rw=1, want=196, limit=16 [ 1107.491814] attempt to access beyond end of device [ 1107.491823] loop5: rw=1, want=197, limit=16 [ 1107.493153] attempt to access beyond end of device [ 1107.499649] loop0: rw=2049, want=151, limit=16 [ 1107.516948] loop5: rw=1, want=221, limit=16 [ 1107.525537] attempt to access beyond end of device [ 1107.537939] attempt to access beyond end of device [ 1107.540555] attempt to access beyond end of device [ 1107.544925] attempt to access beyond end of device [ 1107.551702] loop4: rw=1, want=41, limit=16 [ 1107.559355] loop5: rw=1, want=256, limit=16 [ 1107.559513] attempt to access beyond end of device [ 1107.568222] loop2: rw=1, want=211, limit=16 [ 1107.572032] loop3: rw=1, want=107, limit=16 [ 1107.581200] loop4: rw=1, want=42, limit=16 [ 1107.584332] attempt to access beyond end of device [ 1107.586612] attempt to access beyond end of device [ 1107.591548] loop2: rw=1, want=212, limit=16 [ 1107.598190] attempt to access beyond end of device [ 1107.605368] loop0: rw=2049, want=152, limit=16 [ 1107.607790] attempt to access beyond end of device [ 1107.610022] loop3: rw=1, want=108, limit=16 [ 1107.620944] attempt to access beyond end of device [ 1107.625986] attempt to access beyond end of device [ 1107.634220] attempt to access beyond end of device [ 1107.634456] loop0: rw=2049, want=185, limit=16 [ 1107.650414] loop4: rw=1, want=43, limit=16 [ 1107.650570] loop3: rw=1, want=109, limit=16 [ 1107.661268] loop2: rw=1, want=223, limit=16 [ 1107.664895] attempt to access beyond end of device [ 1107.674852] attempt to access beyond end of device [ 1107.678025] attempt to access beyond end of device [ 1107.683408] attempt to access beyond end of device [ 1107.687419] loop3: rw=1, want=133, limit=16 [ 1107.693358] loop2: rw=1, want=224, limit=16 [ 1107.709915] loop4: rw=1, want=44, limit=16 [ 1107.724120] loop0: rw=2049, want=186, limit=16 [ 1107.731300] attempt to access beyond end of device [ 1107.733698] attempt to access beyond end of device [ 1107.739754] attempt to access beyond end of device [ 1107.751656] loop4: rw=1, want=52, limit=16 [ 1107.759282] attempt to access beyond end of device [ 1107.763801] loop2: rw=1, want=225, limit=16 [ 1107.773659] attempt to access beyond end of device [ 1107.786669] attempt to access beyond end of device [ 1107.797426] loop4: rw=1, want=53, limit=16 [ 1107.817222] loop3: rw=1, want=168, limit=16 [ 1107.827582] loop2: rw=1, want=226, limit=16 [ 1107.829143] loop0: rw=2049, want=189, limit=16 [ 1107.835592] attempt to access beyond end of device [ 1107.845863] attempt to access beyond end of device [ 1107.852240] attempt to access beyond end of device [ 1107.852952] attempt to access beyond end of device [ 1107.857356] attempt to access beyond end of device [ 1107.867303] loop5: rw=2049, want=48, limit=16 [ 1107.872910] loop0: rw=2049, want=196, limit=16 [ 1107.874817] loop4: rw=1, want=54, limit=16 [ 1107.877576] loop3: rw=1, want=184, limit=16 [ 1107.889192] attempt to access beyond end of device [ 1107.894774] attempt to access beyond end of device [ 1107.899925] attempt to access beyond end of device [ 1107.902259] loop2: rw=1, want=250, limit=16 [ 1107.905077] loop5: rw=2049, want=49, limit=16 [ 1107.912094] attempt to access beyond end of device [ 1107.914061] loop0: rw=2049, want=197, limit=16 [ 1107.920291] loop4: rw=1, want=55, limit=16 [ 1107.923505] attempt to access beyond end of device [ 1107.931297] loop3: rw=1, want=217, limit=16 [ 1107.933135] loop0: rw=2049, want=198, limit=16 [ 1107.940162] attempt to access beyond end of device [ 1107.946857] attempt to access beyond end of device [ 1107.950295] attempt to access beyond end of device [ 1107.951971] loop0: rw=2049, want=199, limit=16 [ 1107.959143] loop3: rw=1, want=256, limit=16 10:39:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1107.961577] attempt to access beyond end of device [ 1107.961588] loop0: rw=2049, want=200, limit=16 [ 1107.961645] attempt to access beyond end of device [ 1107.968180] loop4: rw=1, want=56, limit=16 [ 1107.971704] attempt to access beyond end of device [ 1107.996554] attempt to access beyond end of device [ 1107.996568] loop4: rw=1, want=80, limit=16 [ 1107.996628] attempt to access beyond end of device [ 1107.996636] loop4: rw=1, want=82, limit=16 [ 1107.996666] attempt to access beyond end of device [ 1107.996675] loop4: rw=1, want=83, limit=16 [ 1107.996705] attempt to access beyond end of device [ 1107.996713] loop4: rw=1, want=85, limit=16 [ 1107.996742] attempt to access beyond end of device [ 1107.996750] loop4: rw=1, want=86, limit=16 [ 1107.996781] attempt to access beyond end of device [ 1107.996790] loop4: rw=1, want=87, limit=16 [ 1107.996818] attempt to access beyond end of device [ 1107.996827] loop4: rw=1, want=88, limit=16 [ 1107.996857] attempt to access beyond end of device [ 1107.996866] loop4: rw=1, want=89, limit=16 [ 1107.996894] attempt to access beyond end of device [ 1107.996903] loop4: rw=1, want=90, limit=16 [ 1107.996974] attempt to access beyond end of device [ 1107.996984] loop4: rw=1, want=114, limit=16 [ 1107.997073] attempt to access beyond end of device [ 1107.997082] loop4: rw=1, want=152, limit=16 [ 1107.997179] attempt to access beyond end of device [ 1107.997188] loop4: rw=1, want=177, limit=16 [ 1107.997254] attempt to access beyond end of device [ 1107.997264] loop4: rw=1, want=188, limit=16 [ 1107.997310] attempt to access beyond end of device [ 1107.997319] loop4: rw=1, want=190, limit=16 [ 1107.997348] attempt to access beyond end of device [ 1107.997356] loop4: rw=1, want=191, limit=16 [ 1107.997385] attempt to access beyond end of device [ 1107.997394] loop4: rw=1, want=192, limit=16 [ 1107.997423] attempt to access beyond end of device [ 1107.997432] loop4: rw=1, want=193, limit=16 [ 1107.997460] attempt to access beyond end of device [ 1107.997469] loop4: rw=1, want=194, limit=16 [ 1107.999738] attempt to access beyond end of device [ 1107.999749] loop4: rw=1, want=195, limit=16 [ 1107.999780] attempt to access beyond end of device [ 1107.999789] loop4: rw=1, want=196, limit=16 [ 1107.999818] attempt to access beyond end of device [ 1107.999827] loop4: rw=1, want=198, limit=16 [ 1107.999894] attempt to access beyond end of device [ 1107.999903] loop4: rw=1, want=215, limit=16 [ 1107.999954] attempt to access beyond end of device [ 1107.999963] loop4: rw=1, want=216, limit=16 [ 1107.999999] attempt to access beyond end of device [ 1108.000007] loop4: rw=1, want=217, limit=16 [ 1108.000035] attempt to access beyond end of device [ 1108.000044] loop4: rw=1, want=218, limit=16 [ 1108.000074] attempt to access beyond end of device [ 1108.000083] loop4: rw=1, want=219, limit=16 [ 1108.000112] attempt to access beyond end of device [ 1108.000121] loop4: rw=1, want=220, limit=16 [ 1108.000156] attempt to access beyond end of device [ 1108.000165] loop4: rw=1, want=221, limit=16 [ 1108.000193] attempt to access beyond end of device [ 1108.000201] loop4: rw=1, want=223, limit=16 [ 1108.000230] attempt to access beyond end of device [ 1108.000239] loop4: rw=1, want=224, limit=16 [ 1108.000296] attempt to access beyond end of device [ 1108.000305] loop4: rw=1, want=232, limit=16 [ 1108.000350] attempt to access beyond end of device [ 1108.000358] loop4: rw=1, want=233, limit=16 [ 1108.000387] attempt to access beyond end of device [ 1108.000395] loop4: rw=1, want=234, limit=16 [ 1108.000423] attempt to access beyond end of device [ 1108.000432] loop4: rw=1, want=236, limit=16 [ 1108.000461] attempt to access beyond end of device [ 1108.000470] loop4: rw=1, want=237, limit=16 [ 1108.000499] attempt to access beyond end of device [ 1108.000507] loop4: rw=1, want=238, limit=16 [ 1108.000542] attempt to access beyond end of device [ 1108.000551] loop4: rw=1, want=239, limit=16 [ 1108.000579] attempt to access beyond end of device [ 1108.000588] loop4: rw=1, want=240, limit=16 [ 1108.000615] attempt to access beyond end of device [ 1108.000624] loop4: rw=1, want=241, limit=16 [ 1108.009309] attempt to access beyond end of device [ 1108.009323] loop4: rw=1, want=249, limit=16 [ 1108.009398] attempt to access beyond end of device [ 1108.009407] loop4: rw=1, want=260, limit=16 [ 1108.130548] loop0: rw=2049, want=231, limit=16 [ 1108.133067] loop5: rw=2049, want=50, limit=16 [ 1108.146584] attempt to access beyond end of device [ 1108.152183] attempt to access beyond end of device [ 1108.183587] loop0: rw=2049, want=232, limit=16 [ 1108.185527] loop5: rw=2049, want=51, limit=16 [ 1108.200374] attempt to access beyond end of device [ 1108.200389] loop0: rw=2049, want=234, limit=16 [ 1108.200426] attempt to access beyond end of device [ 1108.200435] loop0: rw=2049, want=235, limit=16 [ 1108.200469] attempt to access beyond end of device [ 1108.200479] loop0: rw=2049, want=237, limit=16 [ 1108.200519] attempt to access beyond end of device [ 1108.200530] loop0: rw=2049, want=238, limit=16 [ 1108.200565] attempt to access beyond end of device [ 1108.200574] loop0: rw=2049, want=239, limit=16 [ 1108.200607] attempt to access beyond end of device [ 1108.200616] loop0: rw=2049, want=240, limit=16 [ 1108.687935] attempt to access beyond end of device [ 1108.693536] loop5: rw=2049, want=52, limit=16 [ 1108.698097] attempt to access beyond end of device [ 1108.705927] loop5: rw=2049, want=103, limit=16 [ 1108.710576] attempt to access beyond end of device [ 1108.716447] loop5: rw=2049, want=131, limit=16 [ 1108.721929] attempt to access beyond end of device [ 1108.726905] loop5: rw=2049, want=167, limit=16 [ 1108.732458] attempt to access beyond end of device 10:39:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1108.737401] loop5: rw=2049, want=192, limit=16 [ 1108.751656] attempt to access beyond end of device [ 1108.770014] loop0: rw=1, want=40, limit=16 10:39:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1108.793230] attempt to access beyond end of device [ 1108.825720] attempt to access beyond end of device [ 1108.831053] loop5: rw=1, want=100, limit=16 [ 1108.849415] loop0: rw=1, want=41, limit=16 [ 1108.867904] attempt to access beyond end of device [ 1108.895035] attempt to access beyond end of device [ 1108.916747] loop5: rw=1, want=101, limit=16 [ 1108.936879] loop0: rw=1, want=42, limit=16 [ 1108.956296] attempt to access beyond end of device [ 1108.979103] attempt to access beyond end of device [ 1109.000179] attempt to access beyond end of device [ 1109.009593] loop5: rw=1, want=102, limit=16 [ 1109.022840] loop0: rw=1, want=45, limit=16 [ 1109.040149] attempt to access beyond end of device [ 1109.046092] attempt to access beyond end of device [ 1109.047215] loop3: rw=2049, want=32, limit=16 [ 1109.063059] loop4: rw=2049, want=64, limit=16 [ 1109.063422] attempt to access beyond end of device [ 1109.077782] attempt to access beyond end of device [ 1109.084666] attempt to access beyond end of device [ 1109.085975] loop5: rw=1, want=104, limit=16 10:39:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1109.099590] loop4: rw=2049, want=128, limit=16 [ 1109.107991] loop3: rw=2049, want=81, limit=16 [ 1109.110750] attempt to access beyond end of device [ 1109.119358] attempt to access beyond end of device [ 1109.127137] loop5: rw=1, want=105, limit=16 [ 1109.136726] loop4: rw=2049, want=153, limit=16 [ 1109.142536] loop0: rw=1, want=46, limit=16 [ 1109.142585] attempt to access beyond end of device [ 1109.142594] loop0: rw=1, want=47, limit=16 [ 1109.142624] attempt to access beyond end of device [ 1109.142633] loop0: rw=1, want=48, limit=16 [ 1109.142669] attempt to access beyond end of device [ 1109.142677] loop0: rw=1, want=49, limit=16 [ 1109.142706] attempt to access beyond end of device [ 1109.142715] loop0: rw=1, want=50, limit=16 [ 1109.142790] attempt to access beyond end of device [ 1109.142800] loop0: rw=1, want=60, limit=16 [ 1109.142845] attempt to access beyond end of device [ 1109.160359] attempt to access beyond end of device [ 1109.164742] attempt to access beyond end of device [ 1109.169165] loop3: rw=2049, want=90, limit=16 [ 1109.188569] loop5: rw=1, want=106, limit=16 [ 1109.192423] attempt to access beyond end of device [ 1109.228780] attempt to access beyond end of device [ 1109.228794] loop5: rw=1, want=107, limit=16 [ 1109.228824] attempt to access beyond end of device [ 1109.228833] loop5: rw=1, want=108, limit=16 [ 1109.228863] attempt to access beyond end of device [ 1109.228872] loop5: rw=1, want=109, limit=16 [ 1109.228957] attempt to access beyond end of device [ 1109.228967] loop5: rw=1, want=125, limit=16 [ 1109.229020] attempt to access beyond end of device [ 1109.229029] loop5: rw=1, want=126, limit=16 [ 1109.229058] attempt to access beyond end of device [ 1109.229067] loop5: rw=1, want=127, limit=16 [ 1109.229097] attempt to access beyond end of device [ 1109.229105] loop5: rw=1, want=128, limit=16 [ 1109.229134] attempt to access beyond end of device [ 1109.229142] loop5: rw=1, want=129, limit=16 [ 1109.229172] attempt to access beyond end of device [ 1109.229181] loop5: rw=1, want=130, limit=16 [ 1109.229209] attempt to access beyond end of device [ 1109.229218] loop5: rw=1, want=132, limit=16 [ 1109.229247] attempt to access beyond end of device [ 1109.229256] loop5: rw=1, want=133, limit=16 [ 1109.229284] attempt to access beyond end of device [ 1109.229292] loop5: rw=1, want=134, limit=16 [ 1109.229370] attempt to access beyond end of device [ 1109.229379] loop5: rw=1, want=166, limit=16 [ 1109.229476] attempt to access beyond end of device [ 1109.229486] loop5: rw=1, want=191, limit=16 [ 1109.229715] attempt to access beyond end of device [ 1109.229725] loop5: rw=1, want=256, limit=16 [ 1109.230153] loop0: rw=1, want=62, limit=16 [ 1109.230189] attempt to access beyond end of device [ 1109.230199] loop0: rw=1, want=63, limit=16 [ 1109.230227] attempt to access beyond end of device [ 1109.230236] loop0: rw=1, want=64, limit=16 [ 1109.230265] attempt to access beyond end of device [ 1109.230274] loop0: rw=1, want=65, limit=16 [ 1109.230302] attempt to access beyond end of device [ 1109.230311] loop0: rw=1, want=67, limit=16 [ 1109.230340] attempt to access beyond end of device [ 1109.230349] loop0: rw=1, want=68, limit=16 [ 1109.230378] attempt to access beyond end of device [ 1109.230386] loop0: rw=1, want=69, limit=16 [ 1109.230414] attempt to access beyond end of device [ 1109.230423] loop0: rw=1, want=70, limit=16 [ 1109.230483] attempt to access beyond end of device [ 1109.230492] loop0: rw=1, want=79, limit=16 [ 1109.232583] attempt to access beyond end of device [ 1109.232596] loop0: rw=1, want=104, limit=16 [ 1109.232694] attempt to access beyond end of device [ 1109.232703] loop0: rw=1, want=130, limit=16 [ 1109.232760] attempt to access beyond end of device [ 1109.232769] loop0: rw=1, want=131, limit=16 [ 1109.232800] attempt to access beyond end of device [ 1109.232809] loop0: rw=1, want=132, limit=16 [ 1109.232838] attempt to access beyond end of device [ 1109.232847] loop0: rw=1, want=133, limit=16 [ 1109.232876] attempt to access beyond end of device [ 1109.232891] loop0: rw=1, want=137, limit=16 [ 1109.232921] attempt to access beyond end of device [ 1109.232929] loop0: rw=1, want=138, limit=16 [ 1109.232958] attempt to access beyond end of device [ 1109.232967] loop0: rw=1, want=139, limit=16 [ 1109.232997] attempt to access beyond end of device [ 1109.233005] loop0: rw=1, want=140, limit=16 [ 1109.233034] attempt to access beyond end of device [ 1109.233043] loop0: rw=1, want=141, limit=16 [ 1109.233103] attempt to access beyond end of device [ 1109.233112] loop0: rw=1, want=149, limit=16 [ 1109.233213] attempt to access beyond end of device [ 1109.233222] loop0: rw=1, want=184, limit=16 [ 1109.233279] attempt to access beyond end of device [ 1109.233288] loop0: rw=1, want=187, limit=16 [ 1109.233317] attempt to access beyond end of device [ 1109.233325] loop0: rw=1, want=188, limit=16 [ 1109.233359] attempt to access beyond end of device [ 1109.233368] loop0: rw=1, want=190, limit=16 [ 1109.233396] attempt to access beyond end of device [ 1109.233405] loop0: rw=1, want=191, limit=16 [ 1109.233434] attempt to access beyond end of device [ 1109.233443] loop0: rw=1, want=192, limit=16 [ 1109.233471] attempt to access beyond end of device [ 1109.233479] loop0: rw=1, want=193, limit=16 [ 1109.233508] attempt to access beyond end of device [ 1109.233517] loop0: rw=1, want=194, limit=16 [ 1109.233546] attempt to access beyond end of device [ 1109.233555] loop0: rw=1, want=195, limit=16 [ 1109.233741] attempt to access beyond end of device [ 1109.233751] loop0: rw=1, want=224, limit=16 [ 1109.233804] attempt to access beyond end of device [ 1109.233813] loop0: rw=1, want=225, limit=16 [ 1109.233842] attempt to access beyond end of device [ 1109.233851] loop0: rw=1, want=226, limit=16 [ 1109.233878] attempt to access beyond end of device [ 1109.233893] loop0: rw=1, want=227, limit=16 [ 1109.233922] attempt to access beyond end of device [ 1109.233931] loop0: rw=1, want=228, limit=16 [ 1109.233959] attempt to access beyond end of device [ 1109.233967] loop0: rw=1, want=229, limit=16 [ 1109.233996] attempt to access beyond end of device [ 1109.234005] loop0: rw=1, want=230, limit=16 [ 1109.234032] attempt to access beyond end of device [ 1109.234041] loop0: rw=1, want=233, limit=16 [ 1109.234069] attempt to access beyond end of device [ 1109.234078] loop0: rw=1, want=236, limit=16 [ 1109.234141] attempt to access beyond end of device [ 1109.234150] loop0: rw=1, want=256, limit=16 [ 1109.329024] attempt to access beyond end of device [ 1109.329127] loop3: rw=2049, want=91, limit=16 [ 1109.332724] attempt to access beyond end of device [ 1109.332908] loop3: rw=2049, want=92, limit=16 [ 1109.333855] attempt to access beyond end of device [ 1109.333978] loop3: rw=2049, want=94, limit=16 [ 1109.334940] attempt to access beyond end of device [ 1109.335024] loop3: rw=2049, want=122, limit=16 [ 1109.337380] attempt to access beyond end of device [ 1109.337562] loop3: rw=2049, want=123, limit=16 [ 1109.338421] attempt to access beyond end of device [ 1109.338622] loop3: rw=2049, want=158, limit=16 [ 1109.351650] attempt to access beyond end of device [ 1109.351819] loop3: rw=2049, want=161, limit=16 [ 1109.353494] attempt to access beyond end of device [ 1109.353598] loop3: rw=2049, want=186, limit=16 [ 1109.354894] attempt to access beyond end of device [ 1109.354999] loop3: rw=2049, want=187, limit=16 [ 1109.355921] attempt to access beyond end of device [ 1109.356085] loop3: rw=2049, want=206, limit=16 [ 1109.356911] attempt to access beyond end of device [ 1109.357016] loop3: rw=2049, want=207, limit=16 [ 1109.358247] attempt to access beyond end of device [ 1109.358351] loop3: rw=2049, want=209, limit=16 [ 1109.359186] attempt to access beyond end of device [ 1109.359251] loop3: rw=2049, want=215, limit=16 [ 1109.360300] attempt to access beyond end of device [ 1109.360384] loop3: rw=2049, want=240, limit=16 [ 1110.019951] loop4: rw=2049, want=154, limit=16 [ 1110.024736] buffer_io_error: 307 callbacks suppressed [ 1110.024745] Buffer I/O error on dev loop4, logical block 153, lost async page write [ 1110.039393] attempt to access beyond end of device [ 1110.044510] loop4: rw=2049, want=155, limit=16 10:39:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x0, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1110.049098] Buffer I/O error on dev loop4, logical block 154, lost async page write [ 1110.057051] attempt to access beyond end of device [ 1110.062387] loop4: rw=2049, want=188, limit=16 [ 1110.066980] Buffer I/O error on dev loop4, logical block 187, lost async page write [ 1110.074919] attempt to access beyond end of device [ 1110.079939] loop4: rw=2049, want=189, limit=16 [ 1110.085223] Buffer I/O error on dev loop4, logical block 188, lost async page write [ 1110.093721] attempt to access beyond end of device [ 1110.099072] loop4: rw=2049, want=190, limit=16 10:39:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1110.104752] Buffer I/O error on dev loop4, logical block 189, lost async page write [ 1110.113240] attempt to access beyond end of device [ 1110.121624] loop4: rw=2049, want=191, limit=16 [ 1110.121793] attempt to access beyond end of device [ 1110.126220] Buffer I/O error on dev loop4, logical block 190, lost async page write [ 1110.142346] attempt to access beyond end of device [ 1110.147296] loop4: rw=2049, want=192, limit=16 [ 1110.152894] Buffer I/O error on dev loop4, logical block 191, lost async page write [ 1110.170720] loop3: rw=1, want=80, limit=16 [ 1110.175067] attempt to access beyond end of device [ 1110.193137] attempt to access beyond end of device [ 1110.199493] loop4: rw=2049, want=225, limit=16 [ 1110.205164] loop3: rw=1, want=89, limit=16 [ 1110.209467] attempt to access beyond end of device [ 1110.291284] Buffer I/O error on dev loop4, logical block 224, lost async page write [ 1110.326755] attempt to access beyond end of device [ 1110.338498] attempt to access beyond end of device [ 1110.344404] loop3: rw=1, want=93, limit=16 [ 1110.345782] loop0: rw=2049, want=25, limit=16 [ 1110.348647] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 1110.348692] attempt to access beyond end of device [ 1110.348707] loop3: rw=1, want=95, limit=16 [ 1110.363498] Buffer I/O error on dev loop0, logical block 24, lost async page write [ 1110.385861] loop4: rw=2049, want=226, limit=16 [ 1110.400326] attempt to access beyond end of device [ 1110.410977] attempt to access beyond end of device [ 1110.419434] loop2: rw=2049, want=40, limit=16 [ 1110.426557] loop4: rw=2049, want=227, limit=16 [ 1110.436010] attempt to access beyond end of device [ 1110.491597] attempt to access beyond end of device [ 1110.497746] attempt to access beyond end of device [ 1110.506265] loop2: rw=2049, want=41, limit=16 [ 1110.512306] loop3: rw=1, want=96, limit=16 [ 1110.517709] loop4: rw=2049, want=252, limit=16 [ 1110.525583] attempt to access beyond end of device [ 1110.530973] loop2: rw=2049, want=210, limit=16 [ 1110.536485] attempt to access beyond end of device [ 1110.539012] attempt to access beyond end of device [ 1110.571385] loop2: rw=2049, want=211, limit=16 [ 1110.576902] attempt to access beyond end of device [ 1110.578459] attempt to access beyond end of device [ 1110.582502] loop2: rw=2049, want=212, limit=16 [ 1110.592856] attempt to access beyond end of device [ 1110.597961] loop2: rw=2049, want=213, limit=16 [ 1110.603500] attempt to access beyond end of device [ 1110.607069] loop3: rw=1, want=97, limit=16 [ 1110.608611] loop2: rw=2049, want=214, limit=16 [ 1110.616536] attempt to access beyond end of device [ 1110.618143] attempt to access beyond end of device [ 1110.628849] attempt to access beyond end of device [ 1110.634856] loop4: rw=2049, want=253, limit=16 [ 1110.637124] attempt to access beyond end of device [ 1110.639577] loop0: rw=2049, want=26, limit=16 [ 1110.651917] loop5: rw=2049, want=32, limit=16 [ 1110.655901] attempt to access beyond end of device [ 1110.655945] loop5: rw=2049, want=33, limit=16 [ 1110.657561] attempt to access beyond end of device [ 1110.657626] loop5: rw=2049, want=34, limit=16 [ 1110.658645] attempt to access beyond end of device [ 1110.658729] loop5: rw=2049, want=35, limit=16 [ 1110.664367] attempt to access beyond end of device [ 1110.664541] loop5: rw=2049, want=36, limit=16 [ 1110.666213] attempt to access beyond end of device [ 1110.666339] loop5: rw=2049, want=37, limit=16 [ 1110.668702] attempt to access beyond end of device [ 1110.668996] loop5: rw=2049, want=38, limit=16 [ 1110.670016] attempt to access beyond end of device [ 1110.670141] loop5: rw=2049, want=41, limit=16 [ 1110.676131] attempt to access beyond end of device [ 1110.676337] loop5: rw=2049, want=48, limit=16 [ 1110.679910] attempt to access beyond end of device [ 1110.680160] loop5: rw=2049, want=105, limit=16 [ 1110.685681] attempt to access beyond end of device [ 1110.686068] loop5: rw=2049, want=106, limit=16 [ 1110.687550] attempt to access beyond end of device [ 1110.691909] loop2: rw=2049, want=215, limit=16 [ 1110.692284] attempt to access beyond end of device [ 1110.701485] loop3: rw=1, want=98, limit=16 [ 1110.701535] attempt to access beyond end of device [ 1110.701544] loop3: rw=1, want=99, limit=16 [ 1110.701576] attempt to access beyond end of device [ 1110.701585] loop3: rw=1, want=100, limit=16 [ 1110.701613] attempt to access beyond end of device [ 1110.701621] loop3: rw=1, want=101, limit=16 [ 1110.701699] attempt to access beyond end of device [ 1110.701709] loop3: rw=1, want=117, limit=16 [ 1110.701762] attempt to access beyond end of device [ 1110.701778] loop3: rw=1, want=118, limit=16 [ 1110.701807] attempt to access beyond end of device [ 1110.701817] loop3: rw=1, want=119, limit=16 [ 1110.701845] attempt to access beyond end of device [ 1110.701854] loop3: rw=1, want=120, limit=16 [ 1110.701882] attempt to access beyond end of device [ 1110.701891] loop3: rw=1, want=121, limit=16 [ 1110.701919] attempt to access beyond end of device [ 1110.701927] loop3: rw=1, want=124, limit=16 [ 1110.701953] attempt to access beyond end of device [ 1110.706638] attempt to access beyond end of device [ 1110.722983] loop5: rw=2049, want=107, limit=16 [ 1110.726089] attempt to access beyond end of device [ 1110.778019] loop3: rw=1, want=125, limit=16 [ 1110.778077] attempt to access beyond end of device [ 1110.778087] loop3: rw=1, want=126, limit=16 [ 1110.778118] attempt to access beyond end of device [ 1110.778127] loop3: rw=1, want=127, limit=16 [ 1110.778215] attempt to access beyond end of device [ 1110.778224] loop3: rw=1, want=151, limit=16 [ 1110.778281] attempt to access beyond end of device [ 1110.778289] loop3: rw=1, want=152, limit=16 [ 1110.778319] attempt to access beyond end of device [ 1110.778328] loop3: rw=1, want=153, limit=16 [ 1110.778357] attempt to access beyond end of device [ 1110.778366] loop3: rw=1, want=154, limit=16 [ 1110.778395] attempt to access beyond end of device [ 1110.778404] loop3: rw=1, want=155, limit=16 [ 1110.778433] attempt to access beyond end of device [ 1110.778442] loop3: rw=1, want=156, limit=16 [ 1110.778470] attempt to access beyond end of device [ 1110.778479] loop3: rw=1, want=157, limit=16 [ 1110.778507] attempt to access beyond end of device [ 1110.778517] loop3: rw=1, want=159, limit=16 [ 1110.778544] attempt to access beyond end of device [ 1110.778553] loop3: rw=1, want=160, limit=16 [ 1110.778655] attempt to access beyond end of device [ 1110.778664] loop3: rw=1, want=185, limit=16 [ 1110.778738] attempt to access beyond end of device [ 1110.778747] loop3: rw=1, want=203, limit=16 [ 1110.778806] attempt to access beyond end of device [ 1110.778815] loop3: rw=1, want=204, limit=16 [ 1110.778844] attempt to access beyond end of device [ 1110.778853] loop3: rw=1, want=205, limit=16 [ 1110.778881] attempt to access beyond end of device [ 1110.778890] loop3: rw=1, want=208, limit=16 [ 1110.778919] attempt to access beyond end of device [ 1110.778927] loop3: rw=1, want=210, limit=16 [ 1110.778957] attempt to access beyond end of device [ 1110.788500] attempt to access beyond end of device [ 1110.788663] loop5: rw=2049, want=108, limit=16 [ 1110.789318] attempt to access beyond end of device [ 1110.789383] loop5: rw=2049, want=109, limit=16 [ 1110.791148] loop3: rw=1, want=211, limit=16 [ 1110.791192] attempt to access beyond end of device [ 1110.791201] loop3: rw=1, want=212, limit=16 [ 1110.791233] attempt to access beyond end of device [ 1110.791242] loop3: rw=1, want=213, limit=16 [ 1110.791270] attempt to access beyond end of device [ 1110.791279] loop3: rw=1, want=214, limit=16 [ 1110.791362] attempt to access beyond end of device [ 1110.792073] loop3: rw=1, want=239, limit=16 [ 1110.792160] attempt to access beyond end of device [ 1110.792169] loop3: rw=1, want=257, limit=16 [ 1110.794521] attempt to access beyond end of device [ 1110.794664] loop5: rw=2049, want=110, limit=16 [ 1110.799139] attempt to access beyond end of device [ 1110.802021] loop2: rw=2049, want=216, limit=16 [ 1110.803097] attempt to access beyond end of device [ 1110.851486] loop4: rw=2049, want=254, limit=16 [ 1110.875864] loop2: rw=2049, want=232, limit=16 [ 1110.901342] loop5: rw=2049, want=143, limit=16 [ 1110.906172] loop0: rw=2049, want=27, limit=16 [ 1110.930999] attempt to access beyond end of device [ 1110.975048] attempt to access beyond end of device [ 1111.133773] attempt to access beyond end of device [ 1111.165756] loop5: rw=2049, want=144, limit=16 [ 1111.214154] attempt to access beyond end of device [ 1111.274869] attempt to access beyond end of device [ 1111.290057] loop0: rw=2049, want=28, limit=16 10:39:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1111.297686] attempt to access beyond end of device [ 1111.303285] loop0: rw=2049, want=29, limit=16 [ 1111.307944] attempt to access beyond end of device [ 1111.322733] loop0: rw=2049, want=30, limit=16 [ 1111.325430] loop5: rw=2049, want=145, limit=16 [ 1111.327404] attempt to access beyond end of device [ 1111.337508] attempt to access beyond end of device [ 1111.342783] loop2: rw=1, want=209, limit=16 [ 1111.347574] attempt to access beyond end of device [ 1111.353145] loop0: rw=2049, want=71, limit=16 [ 1111.357858] loop3: rw=2049, want=72, limit=16 [ 1111.358890] attempt to access beyond end of device [ 1111.362853] attempt to access beyond end of device [ 1111.362866] loop0: rw=2049, want=96, limit=16 [ 1111.362925] attempt to access beyond end of device [ 1111.362935] loop0: rw=2049, want=121, limit=16 [ 1111.362968] attempt to access beyond end of device [ 1111.362978] loop0: rw=2049, want=153, limit=16 [ 1111.363011] attempt to access beyond end of device [ 1111.363020] loop0: rw=2049, want=154, limit=16 [ 1111.363053] attempt to access beyond end of device [ 1111.363063] loop0: rw=2049, want=155, limit=16 [ 1111.363097] attempt to access beyond end of device [ 1111.363106] loop0: rw=2049, want=156, limit=16 [ 1111.363140] attempt to access beyond end of device [ 1111.363148] loop0: rw=2049, want=157, limit=16 [ 1111.363181] attempt to access beyond end of device [ 1111.363190] loop0: rw=2049, want=158, limit=16 [ 1111.363223] attempt to access beyond end of device [ 1111.363232] loop0: rw=2049, want=159, limit=16 [ 1111.363287] attempt to access beyond end of device [ 1111.363297] loop0: rw=2049, want=185, limit=16 [ 1111.363330] attempt to access beyond end of device [ 1111.363339] loop0: rw=2049, want=202, limit=16 [ 1111.363370] attempt to access beyond end of device [ 1111.363380] loop0: rw=2049, want=203, limit=16 [ 1111.363413] attempt to access beyond end of device [ 1111.363422] loop0: rw=2049, want=204, limit=16 [ 1111.363455] attempt to access beyond end of device [ 1111.363464] loop0: rw=2049, want=205, limit=16 [ 1111.363497] attempt to access beyond end of device [ 1111.363507] loop0: rw=2049, want=206, limit=16 [ 1111.363540] attempt to access beyond end of device [ 1111.363552] loop0: rw=2049, want=239, limit=16 [ 1111.363664] loop2: rw=1, want=256, limit=16 [ 1111.388792] loop5: rw=2049, want=146, limit=16 [ 1111.401857] attempt to access beyond end of device [ 1111.423035] attempt to access beyond end of device [ 1111.438062] loop3: rw=2049, want=108, limit=16 [ 1111.462688] attempt to access beyond end of device [ 1111.473390] attempt to access beyond end of device [ 1111.480858] loop5: rw=2049, want=147, limit=16 [ 1111.490207] loop3: rw=2049, want=166, limit=16 [ 1111.503260] loop0: rw=2049, want=240, limit=16 [ 1111.521160] attempt to access beyond end of device [ 1111.526953] attempt to access beyond end of device [ 1111.538524] loop3: rw=2049, want=185, limit=16 [ 1111.581811] loop5: rw=2049, want=210, limit=16 [ 1111.609787] attempt to access beyond end of device [ 1111.614085] attempt to access beyond end of device [ 1111.618307] loop4: rw=2049, want=255, limit=16 [ 1111.621608] loop3: rw=2049, want=186, limit=16 [ 1111.625712] loop5: rw=2049, want=211, limit=16 [ 1111.636508] attempt to access beyond end of device [ 1111.636809] attempt to access beyond end of device [ 1111.641678] attempt to access beyond end of device [ 1111.641690] loop5: rw=2049, want=212, limit=16 10:39:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1111.641725] attempt to access beyond end of device [ 1111.641735] loop5: rw=2049, want=213, limit=16 [ 1111.641775] attempt to access beyond end of device [ 1111.641784] loop5: rw=2049, want=214, limit=16 [ 1111.641943] loop4: rw=2049, want=256, limit=16 [ 1111.696919] loop3: rw=2049, want=187, limit=16 [ 1111.702975] attempt to access beyond end of device 10:39:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1111.723536] loop3: rw=2049, want=188, limit=16 [ 1111.729207] attempt to access beyond end of device [ 1111.731835] attempt to access beyond end of device [ 1111.753776] attempt to access beyond end of device [ 1111.758330] loop3: rw=2049, want=189, limit=16 [ 1111.760864] loop5: rw=1, want=39, limit=16 [ 1111.775954] attempt to access beyond end of device [ 1111.787039] loop3: rw=2049, want=190, limit=16 [ 1111.796693] attempt to access beyond end of device [ 1111.797241] attempt to access beyond end of device [ 1111.803644] loop3: rw=2049, want=207, limit=16 [ 1111.807093] loop4: rw=1, want=120, limit=16 [ 1111.819899] attempt to access beyond end of device [ 1111.824337] attempt to access beyond end of device [ 1111.827991] loop3: rw=2049, want=208, limit=16 [ 1111.829916] loop5: rw=1, want=40, limit=16 [ 1111.838892] attempt to access beyond end of device [ 1111.842352] attempt to access beyond end of device [ 1111.844276] loop5: rw=1, want=42, limit=16 [ 1111.852737] loop4: rw=1, want=152, limit=16 [ 1111.864852] attempt to access beyond end of device [ 1111.875754] loop5: rw=1, want=43, limit=16 [ 1111.883103] attempt to access beyond end of device [ 1111.886912] loop0: rw=1, want=70, limit=16 [ 1111.888168] loop5: rw=1, want=44, limit=16 [ 1111.896672] attempt to access beyond end of device [ 1111.901797] loop5: rw=1, want=45, limit=16 [ 1111.906156] attempt to access beyond end of device [ 1111.911022] attempt to access beyond end of device [ 1111.911254] loop5: rw=1, want=46, limit=16 [ 1111.920524] attempt to access beyond end of device [ 1111.925672] attempt to access beyond end of device [ 1111.926991] loop3: rw=2049, want=233, limit=16 [ 1111.932078] attempt to access beyond end of device [ 1111.937443] attempt to access beyond end of device [ 1111.940242] loop5: rw=1, want=47, limit=16 [ 1111.949632] loop4: rw=1, want=187, limit=16 [ 1111.954216] loop0: rw=1, want=95, limit=16 [ 1111.958663] attempt to access beyond end of device [ 1111.963869] attempt to access beyond end of device [ 1111.964766] loop3: rw=2049, want=234, limit=16 10:39:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1111.969062] attempt to access beyond end of device [ 1111.980525] loop5: rw=1, want=104, limit=16 [ 1111.984963] loop0: rw=1, want=120, limit=16 [ 1111.990702] attempt to access beyond end of device [ 1111.993321] attempt to access beyond end of device [ 1111.995788] attempt to access beyond end of device [ 1112.006851] loop4: rw=1, want=224, limit=16 [ 1112.012119] loop5: rw=1, want=142, limit=16 [ 1112.015346] loop2: rw=1, want=260, limit=16 [ 1112.016491] loop0: rw=1, want=145, limit=16 [ 1112.021185] attempt to access beyond end of device [ 1112.026912] attempt to access beyond end of device [ 1112.030040] loop3: rw=2049, want=235, limit=16 [ 1112.030086] attempt to access beyond end of device [ 1112.037538] attempt to access beyond end of device [ 1112.053291] attempt to access beyond end of device [ 1112.058228] loop0: rw=1, want=146, limit=16 [ 1112.062935] loop3: rw=2049, want=236, limit=16 [ 1112.064019] loop4: rw=1, want=251, limit=16 [ 1112.071146] attempt to access beyond end of device [ 1112.071985] loop5: rw=1, want=203, limit=16 [ 1112.077876] loop3: rw=2049, want=245, limit=16 [ 1112.082655] attempt to access beyond end of device [ 1112.098464] attempt to access beyond end of device [ 1112.111979] attempt to access beyond end of device [ 1112.118121] loop0: rw=1, want=147, limit=16 [ 1112.123632] loop3: rw=2049, want=257, limit=16 [ 1112.126226] loop5: rw=1, want=204, limit=16 [ 1112.128268] attempt to access beyond end of device [ 1112.133868] attempt to access beyond end of device [ 1112.172270] loop3: rw=2049, want=258, limit=16 [ 1112.177661] attempt to access beyond end of device [ 1112.183013] attempt to access beyond end of device [ 1112.183026] loop3: rw=2049, want=259, limit=16 [ 1112.207574] loop0: rw=1, want=148, limit=16 [ 1112.213099] attempt to access beyond end of device [ 1112.218093] loop0: rw=1, want=149, limit=16 10:39:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1112.225034] attempt to access beyond end of device [ 1112.231074] loop0: rw=1, want=150, limit=16 [ 1112.236257] attempt to access beyond end of device [ 1112.255136] attempt to access beyond end of device [ 1112.260145] loop3: rw=1, want=96, limit=16 [ 1112.282745] loop0: rw=1, want=151, limit=16 [ 1112.289522] attempt to access beyond end of device [ 1112.335580] attempt to access beyond end of device [ 1112.354571] loop3: rw=1, want=97, limit=16 [ 1112.356323] loop5: rw=1, want=205, limit=16 [ 1112.369990] attempt to access beyond end of device [ 1112.386238] loop0: rw=1, want=152, limit=16 [ 1112.398392] loop2: rw=2049, want=48, limit=16 [ 1112.398809] attempt to access beyond end of device [ 1112.406182] attempt to access beyond end of device [ 1112.413688] attempt to access beyond end of device [ 1112.424950] attempt to access beyond end of device [ 1112.427873] attempt to access beyond end of device [ 1112.432638] loop0: rw=1, want=160, limit=16 [ 1112.440414] loop3: rw=1, want=98, limit=16 [ 1112.441346] loop5: rw=1, want=206, limit=16 [ 1112.445959] attempt to access beyond end of device [ 1112.452700] loop4: rw=2049, want=32, limit=16 [ 1112.454592] loop3: rw=1, want=99, limit=16 [ 1112.463499] attempt to access beyond end of device [ 1112.464032] attempt to access beyond end of device [ 1112.477111] loop2: rw=2049, want=77, limit=16 [ 1112.482014] loop3: rw=1, want=100, limit=16 [ 1112.482063] attempt to access beyond end of device [ 1112.482073] loop3: rw=1, want=109, limit=16 [ 1112.482103] attempt to access beyond end of device [ 1112.482113] loop3: rw=1, want=110, limit=16 [ 1112.482143] attempt to access beyond end of device [ 1112.482152] loop3: rw=1, want=111, limit=16 [ 1112.482182] attempt to access beyond end of device [ 1112.482191] loop3: rw=1, want=112, limit=16 [ 1112.482287] attempt to access beyond end of device [ 1112.508940] attempt to access beyond end of device [ 1112.515436] attempt to access beyond end of device [ 1112.524696] attempt to access beyond end of device [ 1112.534534] loop0: rw=1, want=184, limit=16 [ 1112.541652] loop4: rw=2049, want=33, limit=16 [ 1112.545496] loop5: rw=1, want=207, limit=16 [ 1112.551308] attempt to access beyond end of device [ 1112.555134] attempt to access beyond end of device [ 1112.559889] loop4: rw=2049, want=59, limit=16 [ 1112.563935] attempt to access beyond end of device [ 1112.570746] attempt to access beyond end of device [ 1112.573514] loop3: rw=1, want=152, limit=16 10:39:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1112.579406] loop4: rw=2049, want=60, limit=16 [ 1112.583276] loop2: rw=2049, want=78, limit=16 [ 1112.592080] attempt to access beyond end of device [ 1112.599258] loop5: rw=1, want=208, limit=16 [ 1112.606882] loop0: rw=1, want=201, limit=16 [ 1112.607947] loop4: rw=2049, want=61, limit=16 [ 1112.616734] attempt to access beyond end of device [ 1112.628031] attempt to access beyond end of device [ 1112.628049] loop4: rw=2049, want=62, limit=16 [ 1112.635180] attempt to access beyond end of device [ 1112.638145] attempt to access beyond end of device [ 1112.645471] attempt to access beyond end of device [ 1112.654155] loop4: rw=2049, want=63, limit=16 [ 1112.657585] loop5: rw=1, want=209, limit=16 [ 1112.658945] attempt to access beyond end of device [ 1112.667385] loop3: rw=1, want=153, limit=16 [ 1112.670087] attempt to access beyond end of device [ 1112.675186] attempt to access beyond end of device [ 1112.683268] loop0: rw=1, want=238, limit=16 [ 1112.684005] loop2: rw=2049, want=79, limit=16 [ 1112.687834] loop4: rw=2049, want=64, limit=16 [ 1112.701010] attempt to access beyond end of device [ 1112.701022] loop3: rw=1, want=154, limit=16 [ 1112.701053] attempt to access beyond end of device [ 1112.701063] loop3: rw=1, want=155, limit=16 [ 1112.701093] attempt to access beyond end of device [ 1112.701102] loop3: rw=1, want=156, limit=16 [ 1112.701132] attempt to access beyond end of device [ 1112.701141] loop3: rw=1, want=157, limit=16 [ 1112.701170] attempt to access beyond end of device [ 1112.701179] loop3: rw=1, want=158, limit=16 [ 1112.701208] attempt to access beyond end of device [ 1112.701217] loop3: rw=1, want=167, limit=16 [ 1112.701245] attempt to access beyond end of device [ 1112.701254] loop3: rw=1, want=168, limit=16 [ 1112.701343] attempt to access beyond end of device [ 1112.701353] loop3: rw=1, want=184, limit=16 [ 1112.701440] attempt to access beyond end of device [ 1112.701449] loop3: rw=1, want=206, limit=16 [ 1112.701567] attempt to access beyond end of device [ 1112.701580] loop3: rw=1, want=232, limit=16 [ 1112.701647] attempt to access beyond end of device [ 1112.701657] loop3: rw=1, want=244, limit=16 [ 1112.701712] attempt to access beyond end of device [ 1112.701722] loop3: rw=1, want=253, limit=16 [ 1112.742665] loop5: rw=1, want=215, limit=16 [ 1112.745722] attempt to access beyond end of device [ 1112.756996] attempt to access beyond end of device [ 1112.761703] loop0: rw=1, want=249, limit=16 [ 1112.767252] attempt to access beyond end of device [ 1112.773220] attempt to access beyond end of device [ 1112.773232] loop0: rw=1, want=261, limit=16 [ 1112.773658] attempt to access beyond end of device [ 1112.773668] loop5: rw=1, want=216, limit=16 [ 1112.773764] attempt to access beyond end of device [ 1112.816121] loop4: rw=2049, want=65, limit=16 [ 1112.821235] loop2: rw=2049, want=80, limit=16 [ 1112.841375] attempt to access beyond end of device [ 1112.857349] attempt to access beyond end of device [ 1112.905768] loop4: rw=2049, want=120, limit=16 [ 1112.909652] attempt to access beyond end of device [ 1112.909817] loop4: rw=2049, want=160, limit=16 [ 1112.929308] attempt to access beyond end of device [ 1112.929513] loop4: rw=2049, want=193, limit=16 [ 1112.934123] attempt to access beyond end of device [ 1112.934292] loop4: rw=2049, want=194, limit=16 [ 1112.935343] attempt to access beyond end of device [ 1112.935452] loop4: rw=2049, want=195, limit=16 [ 1112.937781] attempt to access beyond end of device [ 1112.938276] loop4: rw=2049, want=197, limit=16 [ 1112.944325] attempt to access beyond end of device [ 1112.947727] loop5: rw=1, want=256, limit=16 [ 1112.974193] loop4: rw=2049, want=198, limit=16 [ 1112.977922] loop2: rw=2049, want=81, limit=16 [ 1113.001217] attempt to access beyond end of device [ 1113.006604] attempt to access beyond end of device [ 1113.033386] loop4: rw=2049, want=230, limit=16 [ 1113.034135] loop2: rw=2049, want=82, limit=16 [ 1113.055041] attempt to access beyond end of device [ 1113.074793] loop4: rw=2049, want=231, limit=16 [ 1113.079782] attempt to access beyond end of device [ 1113.083882] attempt to access beyond end of device [ 1113.096328] loop4: rw=2049, want=232, limit=16 [ 1113.119424] loop2: rw=2049, want=83, limit=16 10:39:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1113.191236] attempt to access beyond end of device [ 1113.196246] loop4: rw=1, want=57, limit=16 [ 1113.202097] attempt to access beyond end of device [ 1113.214633] attempt to access beyond end of device [ 1113.253754] loop4: rw=1, want=58, limit=16 [ 1113.257916] loop2: rw=2049, want=112, limit=16 [ 1113.295890] attempt to access beyond end of device [ 1113.329590] loop2: rw=2049, want=145, limit=16 [ 1113.330374] attempt to access beyond end of device [ 1113.358894] attempt to access beyond end of device [ 1113.392224] loop2: rw=2049, want=146, limit=16 [ 1113.406585] loop4: rw=1, want=66, limit=16 [ 1113.425505] attempt to access beyond end of device [ 1113.461311] loop2: rw=2049, want=147, limit=16 [ 1113.461690] attempt to access beyond end of device [ 1113.486770] attempt to access beyond end of device [ 1113.491253] attempt to access beyond end of device [ 1113.515995] loop5: rw=2049, want=32, limit=16 [ 1113.523028] attempt to access beyond end of device [ 1113.538469] loop2: rw=2049, want=148, limit=16 [ 1113.544509] loop4: rw=1, want=67, limit=16 [ 1113.559009] attempt to access beyond end of device [ 1113.564214] attempt to access beyond end of device [ 1113.565283] loop0: rw=2049, want=188, limit=16 [ 1113.574514] loop4: rw=1, want=68, limit=16 [ 1113.578496] attempt to access beyond end of device [ 1113.578915] loop2: rw=2049, want=149, limit=16 [ 1113.593162] loop5: rw=2049, want=33, limit=16 [ 1113.595213] attempt to access beyond end of device [ 1113.603894] attempt to access beyond end of device [ 1113.606762] attempt to access beyond end of device [ 1113.614068] loop2: rw=2049, want=176, limit=16 [ 1113.614119] attempt to access beyond end of device [ 1113.614130] loop2: rw=2049, want=177, limit=16 [ 1113.614164] attempt to access beyond end of device [ 1113.614173] loop2: rw=2049, want=178, limit=16 [ 1113.614242] attempt to access beyond end of device [ 1113.614252] loop2: rw=2049, want=209, limit=16 [ 1113.614288] attempt to access beyond end of device [ 1113.614297] loop2: rw=2049, want=210, limit=16 [ 1113.614330] attempt to access beyond end of device [ 1113.614340] loop2: rw=2049, want=240, limit=16 [ 1113.614374] attempt to access beyond end of device [ 1113.614383] loop2: rw=2049, want=241, limit=16 [ 1113.614416] attempt to access beyond end of device [ 1113.614425] loop2: rw=2049, want=242, limit=16 [ 1113.614459] attempt to access beyond end of device [ 1113.614468] loop2: rw=2049, want=243, limit=16 [ 1113.614501] attempt to access beyond end of device [ 1113.614510] loop2: rw=2049, want=244, limit=16 [ 1113.614542] attempt to access beyond end of device [ 1113.614552] loop2: rw=2049, want=245, limit=16 [ 1113.614695] loop4: rw=1, want=69, limit=16 [ 1113.614734] attempt to access beyond end of device [ 1113.614743] loop4: rw=1, want=70, limit=16 [ 1113.614771] attempt to access beyond end of device [ 1113.614781] loop4: rw=1, want=71, limit=16 [ 1113.614810] attempt to access beyond end of device [ 1113.614819] loop4: rw=1, want=72, limit=16 [ 1113.614919] attempt to access beyond end of device [ 1113.614928] loop4: rw=1, want=112, limit=16 [ 1113.615192] attempt to access beyond end of device [ 1113.615203] loop4: rw=1, want=152, limit=16 [ 1113.615321] attempt to access beyond end of device [ 1113.615330] loop4: rw=1, want=192, limit=16 [ 1113.615393] attempt to access beyond end of device [ 1113.615402] loop4: rw=1, want=196, limit=16 [ 1113.615432] attempt to access beyond end of device [ 1113.615441] loop4: rw=1, want=199, limit=16 [ 1113.615471] attempt to access beyond end of device [ 1113.615480] loop4: rw=1, want=200, limit=16 [ 1113.615508] attempt to access beyond end of device [ 1113.615518] loop4: rw=1, want=201, limit=16 [ 1113.615547] attempt to access beyond end of device [ 1113.615556] loop4: rw=1, want=202, limit=16 [ 1113.615584] attempt to access beyond end of device [ 1113.615593] loop4: rw=1, want=203, limit=16 [ 1113.615622] attempt to access beyond end of device [ 1113.615631] loop4: rw=1, want=204, limit=16 [ 1113.615659] attempt to access beyond end of device [ 1113.615667] loop4: rw=1, want=205, limit=16 [ 1113.615740] attempt to access beyond end of device [ 1113.615749] loop4: rw=1, want=229, limit=16 [ 1113.615835] attempt to access beyond end of device [ 1113.615844] loop4: rw=1, want=256, limit=16 [ 1114.020291] loop5: rw=2049, want=34, limit=16 [ 1114.027014] attempt to access beyond end of device [ 1114.032071] loop5: rw=2049, want=115, limit=16 [ 1114.036679] attempt to access beyond end of device 10:39:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x0, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) 10:39:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r5, 0xc, 0xffffffffffffffff, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1114.056834] loop5: rw=2049, want=116, limit=16 [ 1114.074553] attempt to access beyond end of device [ 1114.079507] loop5: rw=2049, want=117, limit=16 [ 1114.092103] attempt to access beyond end of device [ 1114.115906] loop2: rw=1, want=72, limit=16 [ 1114.121274] attempt to access beyond end of device [ 1114.137591] attempt to access beyond end of device [ 1114.169842] loop2: rw=1, want=73, limit=16 [ 1114.187125] loop5: rw=2049, want=118, limit=16 [ 1114.210729] attempt to access beyond end of device [ 1114.221397] attempt to access beyond end of device [ 1114.226613] loop2: rw=1, want=74, limit=16 [ 1114.250312] loop5: rw=2049, want=119, limit=16 [ 1114.282334] attempt to access beyond end of device [ 1114.283557] attempt to access beyond end of device [ 1114.298360] attempt to access beyond end of device [ 1114.312538] loop2: rw=1, want=75, limit=16 [ 1114.334945] loop5: rw=2049, want=120, limit=16 [ 1114.346771] attempt to access beyond end of device [ 1114.357030] loop4: rw=2049, want=48, limit=16 [ 1114.369321] attempt to access beyond end of device [ 1114.378466] loop2: rw=1, want=76, limit=16 [ 1114.384653] attempt to access beyond end of device [ 1114.398107] loop5: rw=2049, want=136, limit=16 [ 1114.403732] attempt to access beyond end of device [ 1114.410469] loop4: rw=2049, want=105, limit=16 [ 1114.423957] attempt to access beyond end of device [ 1114.432583] loop2: rw=1, want=84, limit=16 [ 1114.442653] attempt to access beyond end of device [ 1114.460903] attempt to access beyond end of device [ 1114.466011] loop5: rw=2049, want=232, limit=16 [ 1114.474977] loop4: rw=2049, want=106, limit=16 [ 1114.494866] loop2: rw=1, want=85, limit=16 [ 1114.498571] attempt to access beyond end of device [ 1114.504591] loop0: rw=2049, want=188, limit=16 [ 1114.505790] attempt to access beyond end of device [ 1114.516142] attempt to access beyond end of device [ 1114.521265] loop2: rw=1, want=86, limit=16 [ 1114.525646] attempt to access beyond end of device [ 1114.530707] loop2: rw=1, want=87, limit=16 [ 1114.536638] attempt to access beyond end of device [ 1114.541672] loop2: rw=1, want=111, limit=16 [ 1114.544430] loop4: rw=2049, want=107, limit=16 [ 1114.546094] attempt to access beyond end of device [ 1114.555703] loop2: rw=1, want=144, limit=16 [ 1114.558184] attempt to access beyond end of device [ 1114.562388] attempt to access beyond end of device [ 1114.567471] loop4: rw=2049, want=123, limit=16 [ 1114.570853] loop2: rw=1, want=173, limit=16 [ 1114.579787] attempt to access beyond end of device [ 1114.583139] attempt to access beyond end of device [ 1114.585131] loop2: rw=1, want=174, limit=16 10:39:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1114.594225] attempt to access beyond end of device [ 1114.601333] loop2: rw=1, want=175, limit=16 [ 1114.605701] attempt to access beyond end of device [ 1114.619710] loop2: rw=1, want=179, limit=16 [ 1114.630617] attempt to access beyond end of device [ 1114.631468] loop4: rw=2049, want=151, limit=16 [ 1114.652384] loop5: rw=1, want=114, limit=16 [ 1114.652604] attempt to access beyond end of device [ 1114.652615] loop5: rw=1, want=224, limit=16 [ 1114.652726] attempt to access beyond end of device [ 1114.652734] loop5: rw=1, want=256, limit=16 [ 1114.729658] attempt to access beyond end of device [ 1114.736880] loop4: rw=2049, want=152, limit=16 [ 1114.742418] attempt to access beyond end of device [ 1114.744458] attempt to access beyond end of device [ 1114.747435] loop4: rw=2049, want=166, limit=16 [ 1114.768240] attempt to access beyond end of device [ 1114.777923] loop2: rw=1, want=180, limit=16 [ 1114.782651] loop4: rw=2049, want=168, limit=16 [ 1114.784189] attempt to access beyond end of device [ 1114.787702] attempt to access beyond end of device [ 1114.807230] loop4: rw=2049, want=169, limit=16 [ 1114.824302] loop2: rw=1, want=181, limit=16 10:39:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1114.882922] attempt to access beyond end of device [ 1114.914516] attempt to access beyond end of device [ 1114.920030] loop4: rw=1, want=80, limit=16 [ 1114.934263] loop2: rw=1, want=182, limit=16 [ 1114.969685] attempt to access beyond end of device [ 1114.992329] attempt to access beyond end of device [ 1115.020956] loop4: rw=1, want=81, limit=16 [ 1115.041913] loop2: rw=1, want=183, limit=16 [ 1115.056596] attempt to access beyond end of device [ 1115.073524] buffer_io_error: 235 callbacks suppressed [ 1115.073534] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 1115.097639] Buffer I/O error on dev loop2, logical block 182, lost async page write [ 1115.119634] loop5: rw=2049, want=48, limit=16 [ 1115.172310] attempt to access beyond end of device [ 1115.181783] attempt to access beyond end of device [ 1115.206411] attempt to access beyond end of device [ 1115.224403] loop5: rw=2049, want=49, limit=16 [ 1115.243310] loop2: rw=1, want=184, limit=16 [ 1115.301125] loop4: rw=1, want=108, limit=16 [ 1115.306091] Buffer I/O error on dev loop5, logical block 48, lost async page write [ 1115.317799] attempt to access beyond end of device [ 1115.323262] loop3: rw=2049, want=188, limit=16 [ 1115.325199] Buffer I/O error on dev loop2, logical block 183, lost async page write [ 1115.364544] Buffer I/O error on dev loop4, logical block 107, lost async page write [ 1115.374912] attempt to access beyond end of device [ 1115.379857] loop4: rw=1, want=109, limit=16 [ 1115.388100] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 1115.397631] attempt to access beyond end of device [ 1115.398865] attempt to access beyond end of device 10:39:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1115.416689] loop4: rw=1, want=110, limit=16 [ 1115.427096] attempt to access beyond end of device [ 1115.434211] loop5: rw=2049, want=50, limit=16 [ 1115.434444] Buffer I/O error on dev loop4, logical block 109, lost async page write [ 1115.450634] loop2: rw=1, want=208, limit=16 [ 1115.463124] attempt to access beyond end of device [ 1115.470859] attempt to access beyond end of device [ 1115.474366] Buffer I/O error on dev loop5, logical block 49, lost async page write [ 1115.481653] loop0: rw=2049, want=188, limit=16 [ 1115.494969] attempt to access beyond end of device [ 1115.496188] loop2: rw=1, want=234, limit=16 [ 1115.505811] attempt to access beyond end of device 10:39:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1115.512986] attempt to access beyond end of device [ 1115.527110] loop2: rw=1, want=235, limit=16 [ 1115.528314] loop4: rw=1, want=111, limit=16 [ 1115.533654] loop5: rw=2049, want=51, limit=16 [ 1115.541064] Buffer I/O error on dev loop2, logical block 234, lost async page write [ 1115.541105] attempt to access beyond end of device [ 1115.541115] loop2: rw=1, want=236, limit=16 [ 1115.541125] Buffer I/O error on dev loop2, logical block 235, lost async page write [ 1115.541153] attempt to access beyond end of device [ 1115.541163] loop2: rw=1, want=237, limit=16 [ 1115.541192] attempt to access beyond end of device [ 1115.541201] loop2: rw=1, want=238, limit=16 [ 1115.541229] attempt to access beyond end of device [ 1115.541238] loop2: rw=1, want=239, limit=16 [ 1115.541266] attempt to access beyond end of device [ 1115.541275] loop2: rw=1, want=246, limit=16 [ 1115.541305] attempt to access beyond end of device [ 1115.541313] loop2: rw=1, want=247, limit=16 10:39:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1115.541342] attempt to access beyond end of device [ 1115.541351] loop2: rw=1, want=248, limit=16 [ 1115.541416] attempt to access beyond end of device [ 1115.563915] attempt to access beyond end of device [ 1115.649852] attempt to access beyond end of device [ 1115.679065] loop4: rw=1, want=112, limit=16 [ 1115.742004] attempt to access beyond end of device [ 1115.795309] loop4: rw=1, want=113, limit=16 [ 1115.834742] attempt to access beyond end of device [ 1115.879870] loop4: rw=1, want=114, limit=16 [ 1115.888204] loop2: rw=1, want=256, limit=16 [ 1115.946175] attempt to access beyond end of device [ 1116.004832] loop4: rw=1, want=122, limit=16 [ 1116.065240] attempt to access beyond end of device [ 1116.133767] loop4: rw=1, want=147, limit=16 [ 1116.185742] attempt to access beyond end of device [ 1116.212042] loop5: rw=2049, want=52, limit=16 [ 1116.216609] attempt to access beyond end of device [ 1116.221659] loop5: rw=2049, want=53, limit=16 [ 1116.226196] attempt to access beyond end of device [ 1116.231206] loop5: rw=2049, want=97, limit=16 [ 1116.235742] attempt to access beyond end of device [ 1116.240755] loop5: rw=2049, want=98, limit=16 [ 1116.245296] attempt to access beyond end of device [ 1116.250373] loop5: rw=2049, want=99, limit=16 [ 1116.254932] attempt to access beyond end of device [ 1116.262652] loop5: rw=2049, want=129, limit=16 [ 1116.267275] attempt to access beyond end of device [ 1116.272303] loop5: rw=2049, want=130, limit=16 [ 1116.273566] loop4: rw=1, want=148, limit=16 [ 1116.278598] attempt to access beyond end of device [ 1116.286677] loop5: rw=2049, want=131, limit=16 [ 1116.333111] attempt to access beyond end of device [ 1116.337744] attempt to access beyond end of device [ 1116.379080] loop4: rw=1, want=149, limit=16 [ 1116.416571] attempt to access beyond end of device [ 1116.457040] loop5: rw=2049, want=132, limit=16 [ 1116.462780] loop4: rw=1, want=150, limit=16 [ 1116.499562] attempt to access beyond end of device [ 1116.506755] attempt to access beyond end of device [ 1116.549694] attempt to access beyond end of device [ 1116.577773] loop2: rw=2049, want=51, limit=16 [ 1116.591262] loop4: rw=1, want=153, limit=16 [ 1116.591481] attempt to access beyond end of device [ 1116.591492] loop4: rw=1, want=154, limit=16 [ 1116.591523] attempt to access beyond end of device [ 1116.591532] loop4: rw=1, want=155, limit=16 [ 1116.591562] attempt to access beyond end of device [ 1116.591572] loop4: rw=1, want=156, limit=16 [ 1116.591601] attempt to access beyond end of device [ 1116.591609] loop4: rw=1, want=157, limit=16 [ 1116.591678] attempt to access beyond end of device [ 1116.591687] loop4: rw=1, want=165, limit=16 [ 1116.591738] attempt to access beyond end of device [ 1116.591746] loop4: rw=1, want=167, limit=16 [ 1116.591775] attempt to access beyond end of device [ 1116.591784] loop4: rw=1, want=173, limit=16 [ 1116.591814] attempt to access beyond end of device [ 1116.591823] loop4: rw=1, want=174, limit=16 [ 1116.591851] attempt to access beyond end of device [ 1116.591860] loop4: rw=1, want=175, limit=16 [ 1116.591889] attempt to access beyond end of device [ 1116.591898] loop4: rw=1, want=176, limit=16 [ 1116.591926] attempt to access beyond end of device [ 1116.591934] loop4: rw=1, want=177, limit=16 [ 1116.591963] attempt to access beyond end of device [ 1116.591972] loop4: rw=1, want=178, limit=16 [ 1116.592001] attempt to access beyond end of device [ 1116.592010] loop4: rw=1, want=179, limit=16 [ 1116.592068] attempt to access beyond end of device [ 1116.592077] loop4: rw=1, want=187, limit=16 [ 1116.592161] attempt to access beyond end of device [ 1116.592170] loop4: rw=1, want=212, limit=16 [ 1116.592224] attempt to access beyond end of device [ 1116.592233] loop4: rw=1, want=213, limit=16 [ 1116.592262] attempt to access beyond end of device [ 1116.592271] loop4: rw=1, want=214, limit=16 [ 1116.592353] attempt to access beyond end of device [ 1116.592362] loop4: rw=1, want=215, limit=16 [ 1116.592398] attempt to access beyond end of device [ 1116.592410] loop4: rw=1, want=217, limit=16 [ 1116.592598] attempt to access beyond end of device [ 1116.592608] loop4: rw=1, want=218, limit=16 [ 1116.592636] attempt to access beyond end of device [ 1116.592645] loop4: rw=1, want=220, limit=16 [ 1116.592674] attempt to access beyond end of device [ 1116.592683] loop4: rw=1, want=221, limit=16 [ 1116.592712] attempt to access beyond end of device [ 1116.592720] loop4: rw=1, want=222, limit=16 [ 1116.592801] attempt to access beyond end of device [ 1116.592810] loop4: rw=1, want=255, limit=16 [ 1116.623245] loop5: rw=2049, want=133, limit=16 [ 1116.623302] attempt to access beyond end of device [ 1116.623312] loop5: rw=2049, want=153, limit=16 [ 1116.623346] attempt to access beyond end of device [ 1116.623360] loop5: rw=2049, want=154, limit=16 [ 1116.623400] attempt to access beyond end of device [ 1116.623410] loop5: rw=2049, want=155, limit=16 [ 1116.660255] attempt to access beyond end of device [ 1116.663654] attempt to access beyond end of device [ 1116.677836] loop0: rw=2049, want=188, limit=16 [ 1116.681885] loop2: rw=2049, want=52, limit=16 10:39:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1116.982800] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.988393] ieee802154 phy1 wpan1: encryption failed: -22 10:39:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1117.054414] attempt to access beyond end of device [ 1117.059369] loop5: rw=1, want=93, limit=16 [ 1117.072227] attempt to access beyond end of device [ 1117.082670] loop5: rw=1, want=94, limit=16 [ 1117.089257] attempt to access beyond end of device [ 1117.109321] loop5: rw=1, want=95, limit=16 [ 1117.117715] attempt to access beyond end of device [ 1117.124504] loop5: rw=1, want=96, limit=16 [ 1117.129038] attempt to access beyond end of device [ 1117.143347] loop5: rw=1, want=100, limit=16 [ 1117.148236] attempt to access beyond end of device [ 1117.153033] attempt to access beyond end of device [ 1117.175530] loop2: rw=2049, want=83, limit=16 [ 1117.178659] loop5: rw=1, want=101, limit=16 [ 1117.226530] attempt to access beyond end of device [ 1117.270544] loop2: rw=2049, want=84, limit=16 [ 1117.288802] attempt to access beyond end of device [ 1117.327072] loop5: rw=1, want=102, limit=16 [ 1117.352739] attempt to access beyond end of device [ 1117.387089] loop2: rw=2049, want=85, limit=16 [ 1117.408472] attempt to access beyond end of device [ 1117.473120] attempt to access beyond end of device [ 1117.481132] attempt to access beyond end of device [ 1117.487766] loop5: rw=1, want=103, limit=16 [ 1117.516651] loop2: rw=2049, want=86, limit=16 [ 1117.525033] loop4: rw=2049, want=32, limit=16 [ 1117.534458] attempt to access beyond end of device [ 1117.563846] attempt to access beyond end of device [ 1117.569060] loop0: rw=2049, want=188, limit=16 [ 1117.576754] attempt to access beyond end of device [ 1117.581846] loop2: rw=2049, want=87, limit=16 [ 1117.586486] attempt to access beyond end of device [ 1117.588227] attempt to access beyond end of device [ 1117.591810] loop2: rw=2049, want=88, limit=16 [ 1117.591883] attempt to access beyond end of device [ 1117.591893] loop2: rw=2049, want=89, limit=16 [ 1117.591928] attempt to access beyond end of device [ 1117.591937] loop2: rw=2049, want=90, limit=16 [ 1117.591971] attempt to access beyond end of device [ 1117.591981] loop2: rw=2049, want=91, limit=16 [ 1117.592015] attempt to access beyond end of device [ 1117.592024] loop2: rw=2049, want=180, limit=16 [ 1117.592057] attempt to access beyond end of device [ 1117.592066] loop2: rw=2049, want=181, limit=16 [ 1117.592098] attempt to access beyond end of device [ 1117.592108] loop2: rw=2049, want=182, limit=16 [ 1117.592140] attempt to access beyond end of device [ 1117.592150] loop2: rw=2049, want=183, limit=16 [ 1117.592183] attempt to access beyond end of device [ 1117.592192] loop2: rw=2049, want=184, limit=16 [ 1117.592244] attempt to access beyond end of device [ 1117.592254] loop2: rw=2049, want=209, limit=16 [ 1117.592286] attempt to access beyond end of device [ 1117.592296] loop2: rw=2049, want=210, limit=16 [ 1117.592328] attempt to access beyond end of device [ 1117.592338] loop2: rw=2049, want=211, limit=16 [ 1117.592370] attempt to access beyond end of device [ 1117.592379] loop2: rw=2049, want=212, limit=16 [ 1117.592411] attempt to access beyond end of device [ 1117.592421] loop2: rw=2049, want=213, limit=16 [ 1117.592453] attempt to access beyond end of device [ 1117.592462] loop2: rw=2049, want=214, limit=16 [ 1117.592495] attempt to access beyond end of device [ 1117.592504] loop2: rw=2049, want=215, limit=16 [ 1117.592536] attempt to access beyond end of device [ 1117.592545] loop2: rw=2049, want=248, limit=16 [ 1117.592689] loop5: rw=1, want=104, limit=16 [ 1117.592833] attempt to access beyond end of device [ 1117.635590] loop4: rw=2049, want=95, limit=16 [ 1117.637283] loop5: rw=1, want=128, limit=16 [ 1117.660594] attempt to access beyond end of device [ 1117.660996] attempt to access beyond end of device [ 1117.666069] loop4: rw=2049, want=122, limit=16 [ 1117.670395] loop5: rw=1, want=149, limit=16 [ 1117.670462] attempt to access beyond end of device [ 1117.670472] loop5: rw=1, want=150, limit=16 [ 1117.670505] attempt to access beyond end of device [ 1117.670514] loop5: rw=1, want=151, limit=16 [ 1117.670543] attempt to access beyond end of device [ 1117.670553] loop5: rw=1, want=152, limit=16 [ 1117.670582] attempt to access beyond end of device [ 1117.670590] loop5: rw=1, want=156, limit=16 [ 1117.670619] attempt to access beyond end of device [ 1117.670628] loop5: rw=1, want=157, limit=16 [ 1117.670657] attempt to access beyond end of device [ 1117.670665] loop5: rw=1, want=158, limit=16 [ 1117.670696] attempt to access beyond end of device [ 1117.670704] loop5: rw=1, want=159, limit=16 [ 1117.670732] attempt to access beyond end of device [ 1117.670741] loop5: rw=1, want=160, limit=16 [ 1117.670899] attempt to access beyond end of device [ 1117.670908] loop5: rw=1, want=256, limit=16 [ 1117.888430] attempt to access beyond end of device [ 1117.906606] loop4: rw=2049, want=123, limit=16 10:39:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) (fail_nth: 1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1117.924486] attempt to access beyond end of device [ 1117.929734] loop2: rw=1, want=48, limit=16 [ 1117.933006] attempt to access beyond end of device [ 1117.951443] loop4: rw=2049, want=124, limit=16 [ 1117.958356] attempt to access beyond end of device [ 1117.967166] attempt to access beyond end of device [ 1117.970220] loop4: rw=2049, want=125, limit=16 [ 1117.993946] loop2: rw=1, want=49, limit=16 [ 1118.007040] attempt to access beyond end of device [ 1118.024265] loop4: rw=2049, want=126, limit=16 [ 1118.033100] attempt to access beyond end of device [ 1118.038384] FAULT_INJECTION: forcing a failure. [ 1118.038384] name failslab, interval 1, probability 0, space 0, times 1 [ 1118.044528] attempt to access beyond end of device [ 1118.111115] loop2: rw=1, want=50, limit=16 [ 1118.126930] loop4: rw=2049, want=127, limit=16 [ 1118.175008] attempt to access beyond end of device [ 1118.196084] attempt to access beyond end of device [ 1118.231107] CPU: 1 PID: 10567 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1118.239020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1118.248461] Call Trace: [ 1118.251084] dump_stack+0x1fc/0x2ef [ 1118.254740] should_fail.cold+0xa/0xf [ 1118.258624] ? setup_fault_attr+0x200/0x200 [ 1118.262973] ? lock_acquire+0x170/0x3c0 [ 1118.267001] __should_failslab+0x115/0x180 [ 1118.267336] attempt to access beyond end of device [ 1118.271281] should_failslab+0x5/0x10 [ 1118.271297] kmem_cache_alloc+0x277/0x370 [ 1118.271315] io_submit_one+0x11e/0x20c0 [ 1118.271328] ? lookup_ioctx+0x1c0/0x780 [ 1118.271352] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1118.271370] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1118.271383] ? aio_read+0x420/0x420 [ 1118.271402] ? __might_fault+0x11f/0x1d0 [ 1118.271430] __se_sys_io_submit+0x11b/0x4a0 [ 1118.294468] loop5: rw=2049, want=41, limit=16 [ 1118.296921] ? io_submit_one+0x20c0/0x20c0 [ 1118.297007] ? ksys_write+0x1c8/0x2a0 [ 1118.297054] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1118.311454] loop2: rw=1, want=53, limit=16 [ 1118.313632] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1118.313650] ? do_syscall_64+0x21/0x620 [ 1118.322844] attempt to access beyond end of device [ 1118.326145] do_syscall_64+0xf9/0x620 [ 1118.326167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1118.326180] RIP: 0033:0x7f7032bb9209 [ 1118.326194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1118.326200] RSP: 002b:00007f703152e168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1118.326212] RAX: ffffffffffffffda RBX: 00007f7032ccbf60 RCX: 00007f7032bb9209 [ 1118.326221] RDX: 0000000020000540 RSI: 0000000000004011 RDI: 00007f7032ca7000 [ 1118.326233] RBP: 00007f703152e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.326241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.326250] R13: 00007ffcd10b36ff R14: 00007f703152e300 R15: 0000000000022000 [ 1118.377724] attempt to access beyond end of device [ 1118.393680] loop4: rw=2049, want=128, limit=16 [ 1118.421083] attempt to access beyond end of device [ 1118.476000] loop3: rw=2049, want=25, limit=16 [ 1118.490329] attempt to access beyond end of device [ 1118.497914] attempt to access beyond end of device [ 1118.508936] loop3: rw=2049, want=26, limit=16 [ 1118.514856] loop4: rw=2049, want=145, limit=16 [ 1118.526452] attempt to access beyond end of device [ 1118.561580] loop5: rw=2049, want=80, limit=16 [ 1118.563941] attempt to access beyond end of device [ 1118.564045] loop5: rw=2049, want=81, limit=16 [ 1118.566029] attempt to access beyond end of device [ 1118.566133] loop5: rw=2049, want=82, limit=16 [ 1118.569343] attempt to access beyond end of device [ 1118.578215] attempt to access beyond end of device [ 1118.590881] attempt to access beyond end of device [ 1118.604569] loop3: rw=2049, want=27, limit=16 [ 1118.610693] loop5: rw=2049, want=83, limit=16 [ 1118.618674] loop2: rw=1, want=54, limit=16 [ 1118.621240] attempt to access beyond end of device [ 1118.626353] loop4: rw=2049, want=155, limit=16 [ 1118.629819] loop5: rw=2049, want=84, limit=16 [ 1118.637693] attempt to access beyond end of device [ 1118.637711] loop2: rw=1, want=55, limit=16 [ 1118.637741] attempt to access beyond end of device [ 1118.637751] loop2: rw=1, want=56, limit=16 [ 1118.637781] attempt to access beyond end of device [ 1118.637790] loop2: rw=1, want=57, limit=16 [ 1118.637820] attempt to access beyond end of device [ 1118.637829] loop2: rw=1, want=58, limit=16 [ 1118.637917] attempt to access beyond end of device [ 1118.637926] loop2: rw=1, want=82, limit=16 [ 1118.638098] attempt to access beyond end of device [ 1118.638108] loop2: rw=1, want=179, limit=16 [ 1118.638236] attempt to access beyond end of device [ 1118.638245] loop2: rw=1, want=208, limit=16 [ 1118.638333] attempt to access beyond end of device [ 1118.638342] loop2: rw=1, want=247, limit=16 [ 1118.638412] attempt to access beyond end of device [ 1118.638421] loop2: rw=1, want=256, limit=16 [ 1118.648305] attempt to access beyond end of device [ 1118.653375] attempt to access beyond end of device [ 1118.673598] loop3: rw=2049, want=33, limit=16 [ 1118.677418] attempt to access beyond end of device [ 1118.705620] loop0: rw=2049, want=188, limit=16 [ 1118.726263] loop5: rw=2049, want=110, limit=16 [ 1118.762167] attempt to access beyond end of device [ 1118.769140] loop4: rw=2049, want=156, limit=16 [ 1118.815816] loop3: rw=2049, want=36, limit=16 10:39:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) (fail_nth: 2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1118.861458] attempt to access beyond end of device [ 1118.866642] attempt to access beyond end of device [ 1118.883654] attempt to access beyond end of device [ 1118.914334] loop5: rw=2049, want=111, limit=16 [ 1118.915820] loop4: rw=2049, want=157, limit=16 [ 1118.924924] loop3: rw=2049, want=37, limit=16 [ 1118.944810] attempt to access beyond end of device [ 1118.950138] attempt to access beyond end of device [ 1118.955466] loop2: rw=2049, want=72, limit=16 [ 1118.959938] attempt to access beyond end of device [ 1118.960648] loop4: rw=2049, want=158, limit=16 [ 1118.967076] attempt to access beyond end of device [ 1118.971399] attempt to access beyond end of device [ 1118.980122] attempt to access beyond end of device [ 1118.985338] loop2: rw=2049, want=73, limit=16 [ 1118.990915] attempt to access beyond end of device [ 1118.996031] loop2: rw=2049, want=79, limit=16 [ 1118.998770] loop4: rw=2049, want=159, limit=16 [ 1119.001471] attempt to access beyond end of device [ 1119.012199] attempt to access beyond end of device [ 1119.012213] loop5: rw=2049, want=112, limit=16 [ 1119.025316] loop3: rw=2049, want=47, limit=16 [ 1119.030285] loop2: rw=2049, want=97, limit=16 [ 1119.036419] attempt to access beyond end of device [ 1119.037745] loop4: rw=2049, want=160, limit=16 [ 1119.042876] attempt to access beyond end of device [ 1119.058481] attempt to access beyond end of device [ 1119.064180] loop3: rw=2049, want=55, limit=16 [ 1119.065277] attempt to access beyond end of device [ 1119.068733] loop5: rw=2049, want=140, limit=16 [ 1119.080514] loop2: rw=2049, want=113, limit=16 [ 1119.085343] attempt to access beyond end of device [ 1119.092835] attempt to access beyond end of device [ 1119.095495] loop4: rw=2049, want=161, limit=16 [ 1119.097955] attempt to access beyond end of device [ 1119.109051] loop3: rw=2049, want=102, limit=16 [ 1119.114447] attempt to access beyond end of device [ 1119.114639] loop5: rw=2049, want=141, limit=16 [ 1119.124570] loop2: rw=2049, want=114, limit=16 [ 1119.129393] attempt to access beyond end of device [ 1119.132466] loop4: rw=2049, want=177, limit=16 [ 1119.135064] attempt to access beyond end of device [ 1119.158712] loop3: rw=2049, want=107, limit=16 [ 1119.163738] attempt to access beyond end of device [ 1119.168779] attempt to access beyond end of device [ 1119.174236] loop2: rw=2049, want=115, limit=16 [ 1119.176022] FAULT_INJECTION: forcing a failure. [ 1119.176022] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1119.178968] loop5: rw=2049, want=171, limit=16 [ 1119.179017] attempt to access beyond end of device [ 1119.199047] CPU: 0 PID: 10598 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1119.201042] loop3: rw=2049, want=119, limit=16 [ 1119.208380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1119.208385] Call Trace: [ 1119.208406] dump_stack+0x1fc/0x2ef [ 1119.208424] should_fail.cold+0xa/0xf [ 1119.213725] attempt to access beyond end of device [ 1119.222327] ? lock_acquire+0x170/0x3c0 [ 1119.222343] ? setup_fault_attr+0x200/0x200 [ 1119.222443] __alloc_pages_nodemask+0x239/0x2890 [ 1119.222490] ? rcu_read_unlock_special+0x7ce/0xfc0 [ 1119.225369] loop2: rw=2049, want=116, limit=16 [ 1119.228645] ? mark_held_locks+0xa6/0xf0 [ 1119.228665] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1119.228683] ? find_get_entry+0x4cd/0x8a0 [ 1119.232805] attempt to access beyond end of device [ 1119.237376] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1119.237397] ? mark_held_locks+0xa6/0xf0 [ 1119.242093] attempt to access beyond end of device 10:39:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, 0x0) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1119.245659] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1119.245678] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1119.245696] ? rcu_nmi_exit+0xb3/0x180 [ 1119.245766] ? retint_kernel+0x2d/0x2d [ 1119.245818] alloc_pages_current+0x193/0x2a0 [ 1119.245840] pagecache_get_page+0x5bb/0xd50 [ 1119.245864] grab_cache_page_write_begin+0x6a/0xa0 [ 1119.245912] ext4_da_write_begin+0x2ba/0x10e0 [ 1119.245930] ? rcu_nmi_exit+0xb3/0x180 [ 1119.245950] ? ext4_write_begin+0x1610/0x1610 [ 1119.245975] generic_perform_write+0x1f8/0x4d0 [ 1119.246044] ? __mnt_drop_write_file+0x6f/0xa0 [ 1119.246060] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 1119.246074] ? current_time+0x1c0/0x1c0 [ 1119.246092] ? lock_acquire+0x170/0x3c0 [ 1119.246109] __generic_file_write_iter+0x24b/0x610 [ 1119.246129] ext4_file_write_iter+0x2fe/0xf20 [ 1119.246147] ? ext4_file_open+0x600/0x600 [ 1119.246165] ? lock_downgrade+0x720/0x720 [ 1119.246181] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1119.246199] aio_write+0x37f/0x5c0 [ 1119.246216] ? aio_setup_rw.isra.0+0x110/0x110 [ 1119.246234] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1119.246251] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1119.246268] ? rcu_nmi_exit+0xb3/0x180 [ 1119.246284] ? retint_kernel+0x2d/0x2d [ 1119.246304] ? io_submit_one+0x4e6/0x20c0 [ 1119.246321] io_submit_one+0xecd/0x20c0 [ 1119.246339] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1119.246356] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1119.246369] ? aio_read+0x420/0x420 [ 1119.246384] ? __might_fault+0x11f/0x1d0 [ 1119.246415] __se_sys_io_submit+0x11b/0x4a0 [ 1119.246431] ? io_submit_one+0x20c0/0x20c0 [ 1119.246445] ? retint_kernel+0x2d/0x2d [ 1119.246466] ? do_syscall_64+0xbf/0x620 [ 1119.246483] do_syscall_64+0xf9/0x620 [ 1119.246501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1119.246513] RIP: 0033:0x7f7032bb9209 [ 1119.246529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1119.246536] RSP: 002b:00007f703152e168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1119.246550] RAX: ffffffffffffffda RBX: 00007f7032ccbf60 RCX: 00007f7032bb9209 [ 1119.246559] RDX: 0000000020000540 RSI: 0000000000004011 RDI: 00007f7032ca7000 [ 1119.246567] RBP: 00007f703152e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.246574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.246583] R13: 00007ffcd10b36ff R14: 00007f703152e300 R15: 0000000000022000 [ 1119.286742] loop5: rw=2049, want=172, limit=16 [ 1119.290036] loop3: rw=2049, want=137, limit=16 [ 1119.298984] attempt to access beyond end of device [ 1119.318241] attempt to access beyond end of device [ 1119.338743] attempt to access beyond end of device [ 1119.372894] loop3: rw=2049, want=138, limit=16 [ 1119.388608] loop2: rw=2049, want=117, limit=16 [ 1119.405749] attempt to access beyond end of device [ 1119.429553] attempt to access beyond end of device 10:39:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1119.468564] loop5: rw=2049, want=173, limit=16 [ 1119.468621] attempt to access beyond end of device [ 1119.468631] loop5: rw=2049, want=174, limit=16 [ 1119.468666] attempt to access beyond end of device [ 1119.468676] loop5: rw=2049, want=175, limit=16 [ 1119.468716] attempt to access beyond end of device [ 1119.468725] loop5: rw=2049, want=208, limit=16 [ 1119.468786] attempt to access beyond end of device [ 1119.468796] loop5: rw=2049, want=209, limit=16 [ 1119.468829] attempt to access beyond end of device [ 1119.468839] loop5: rw=2049, want=242, limit=16 [ 1119.468872] attempt to access beyond end of device [ 1119.468881] loop5: rw=2049, want=243, limit=16 [ 1119.468915] attempt to access beyond end of device [ 1119.468925] loop5: rw=2049, want=244, limit=16 [ 1119.468957] attempt to access beyond end of device [ 1119.468966] loop5: rw=2049, want=245, limit=16 [ 1119.468999] attempt to access beyond end of device [ 1119.469010] loop5: rw=2049, want=246, limit=16 [ 1119.469045] attempt to access beyond end of device [ 1119.469054] loop5: rw=2049, want=247, limit=16 [ 1119.469087] attempt to access beyond end of device [ 1119.469096] loop5: rw=2049, want=248, limit=16 [ 1119.477226] loop4: rw=1, want=88, limit=16 [ 1119.498131] loop2: rw=2049, want=125, limit=16 [ 1119.569786] loop3: rw=2049, want=139, limit=16 [ 1119.573810] attempt to access beyond end of device [ 1119.633449] attempt to access beyond end of device [ 1119.634781] loop2: rw=2049, want=177, limit=16 [ 1119.657841] attempt to access beyond end of device [ 1119.657854] loop5: rw=1, want=32, limit=16 [ 1119.657908] attempt to access beyond end of device [ 1119.657917] loop5: rw=1, want=33, limit=16 [ 1119.657950] attempt to access beyond end of device [ 1119.657959] loop5: rw=1, want=42, limit=16 [ 1119.657989] attempt to access beyond end of device [ 1119.657998] loop5: rw=1, want=43, limit=16 [ 1119.658028] attempt to access beyond end of device [ 1119.658036] loop5: rw=1, want=44, limit=16 [ 1119.658065] attempt to access beyond end of device [ 1119.658073] loop5: rw=1, want=45, limit=16 [ 1119.658102] attempt to access beyond end of device [ 1119.658110] loop5: rw=1, want=46, limit=16 [ 1119.658139] attempt to access beyond end of device [ 1119.658148] loop5: rw=1, want=47, limit=16 [ 1119.658177] attempt to access beyond end of device [ 1119.658185] loop5: rw=1, want=48, limit=16 [ 1119.658259] attempt to access beyond end of device [ 1119.658268] loop5: rw=1, want=72, limit=16 [ 1119.658321] attempt to access beyond end of device [ 1119.658329] loop5: rw=1, want=73, limit=16 [ 1119.658358] attempt to access beyond end of device [ 1119.658367] loop5: rw=1, want=74, limit=16 10:39:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, 0x0) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1119.658395] attempt to access beyond end of device [ 1119.658404] loop5: rw=1, want=75, limit=16 [ 1119.658434] attempt to access beyond end of device [ 1119.658446] loop5: rw=1, want=76, limit=16 [ 1119.658554] attempt to access beyond end of device [ 1119.658563] loop5: rw=1, want=77, limit=16 [ 1119.658592] attempt to access beyond end of device [ 1119.658601] loop5: rw=1, want=78, limit=16 [ 1119.658630] attempt to access beyond end of device [ 1119.658639] loop5: rw=1, want=79, limit=16 [ 1119.658667] attempt to access beyond end of device [ 1119.658676] loop5: rw=1, want=85, limit=16 [ 1119.658757] attempt to access beyond end of device [ 1119.664244] attempt to access beyond end of device [ 1119.684577] loop5: rw=1, want=109, limit=16 [ 1119.687603] loop2: rw=2049, want=202, limit=16 [ 1119.703044] attempt to access beyond end of device [ 1119.719778] attempt to access beyond end of device [ 1119.742454] loop5: rw=1, want=136, limit=16 [ 1119.744378] loop3: rw=2049, want=140, limit=16 [ 1119.764433] attempt to access beyond end of device [ 1119.769526] attempt to access beyond end of device [ 1119.783765] loop5: rw=1, want=137, limit=16 [ 1119.802861] attempt to access beyond end of device [ 1119.819704] loop4: rw=1, want=89, limit=16 [ 1119.821447] loop2: rw=2049, want=203, limit=16 [ 1119.832067] attempt to access beyond end of device [ 1119.835191] loop3: rw=2049, want=141, limit=16 [ 1119.846616] loop4: rw=1, want=90, limit=16 [ 1119.848726] attempt to access beyond end of device [ 1119.860875] attempt to access beyond end of device [ 1119.868768] attempt to access beyond end of device [ 1119.896917] attempt to access beyond end of device [ 1119.900228] loop2: rw=2049, want=204, limit=16 [ 1119.910460] loop4: rw=1, want=91, limit=16 [ 1119.918628] attempt to access beyond end of device [ 1119.927151] loop3: rw=2049, want=157, limit=16 [ 1119.937202] loop5: rw=1, want=138, limit=16 [ 1119.954348] attempt to access beyond end of device [ 1119.961238] loop2: rw=2049, want=205, limit=16 [ 1119.980597] loop4: rw=1, want=92, limit=16 [ 1119.989211] attempt to access beyond end of device [ 1120.063216] attempt to access beyond end of device 10:39:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1120.068969] attempt to access beyond end of device [ 1120.085017] loop2: rw=2049, want=206, limit=16 [ 1120.092943] buffer_io_error: 187 callbacks suppressed [ 1120.092952] Buffer I/O error on dev loop2, logical block 205, lost async page write [ 1120.114889] attempt to access beyond end of device [ 1120.120891] attempt to access beyond end of device [ 1120.125949] loop3: rw=1, want=28, limit=16 [ 1120.127195] loop2: rw=2049, want=207, limit=16 [ 1120.138950] Buffer I/O error on dev loop2, logical block 206, lost async page write [ 1120.154685] attempt to access beyond end of device [ 1120.155060] Buffer I/O error on dev loop3, logical block 27, lost async page write [ 1120.162419] loop4: rw=1, want=93, limit=16 10:39:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) (fail_nth: 3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1120.178178] loop2: rw=2049, want=208, limit=16 [ 1120.188153] loop5: rw=1, want=139, limit=16 [ 1120.196012] Buffer I/O error on dev loop2, logical block 207, lost async page write [ 1120.207452] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 1120.225009] Buffer I/O error on dev loop5, logical block 138, lost async page write [ 1120.237460] attempt to access beyond end of device [ 1120.245612] attempt to access beyond end of device [ 1120.254066] attempt to access beyond end of device [ 1120.257361] attempt to access beyond end of device [ 1120.260623] loop2: rw=2049, want=224, limit=16 [ 1120.274250] loop4: rw=1, want=94, limit=16 [ 1120.280130] loop5: rw=1, want=142, limit=16 [ 1120.286035] Buffer I/O error on dev loop4, logical block 93, lost async page write [ 1120.297271] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 1120.300399] loop3: rw=1, want=29, limit=16 [ 1120.312541] attempt to access beyond end of device [ 1120.317588] attempt to access beyond end of device [ 1120.325972] loop4: rw=1, want=96, limit=16 [ 1120.333253] Buffer I/O error on dev loop3, logical block 28, lost async page write [ 1120.334168] loop5: rw=1, want=143, limit=16 [ 1120.349041] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 1120.357884] attempt to access beyond end of device [ 1120.363223] attempt to access beyond end of device [ 1120.368284] attempt to access beyond end of device [ 1120.368883] loop0: rw=2049, want=188, limit=16 [ 1120.378537] attempt to access beyond end of device [ 1120.378550] loop3: rw=1, want=30, limit=16 [ 1120.378590] attempt to access beyond end of device [ 1120.378600] loop3: rw=1, want=31, limit=16 [ 1120.378629] attempt to access beyond end of device [ 1120.378638] loop3: rw=1, want=32, limit=16 [ 1120.378667] attempt to access beyond end of device [ 1120.378676] loop3: rw=1, want=34, limit=16 [ 1120.378705] attempt to access beyond end of device [ 1120.378714] loop3: rw=1, want=35, limit=16 [ 1120.378743] attempt to access beyond end of device [ 1120.378751] loop3: rw=1, want=38, limit=16 [ 1120.378822] attempt to access beyond end of device [ 1120.378830] loop3: rw=1, want=46, limit=16 [ 1120.378879] attempt to access beyond end of device [ 1120.378889] loop3: rw=1, want=48, limit=16 [ 1120.378917] attempt to access beyond end of device [ 1120.378926] loop3: rw=1, want=49, limit=16 [ 1120.378955] attempt to access beyond end of device 10:39:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1120.378964] loop3: rw=1, want=50, limit=16 [ 1120.378996] attempt to access beyond end of device [ 1120.379005] loop3: rw=1, want=51, limit=16 [ 1120.379033] attempt to access beyond end of device [ 1120.379042] loop3: rw=1, want=52, limit=16 [ 1120.379070] attempt to access beyond end of device [ 1120.379079] loop3: rw=1, want=53, limit=16 [ 1120.379108] attempt to access beyond end of device [ 1120.379117] loop3: rw=1, want=54, limit=16 [ 1120.379145] attempt to access beyond end of device [ 1120.379153] loop3: rw=1, want=56, limit=16 [ 1120.379241] attempt to access beyond end of device [ 1120.379250] loop3: rw=1, want=96, limit=16 [ 1120.379313] attempt to access beyond end of device [ 1120.379322] loop3: rw=1, want=97, limit=16 [ 1120.379351] attempt to access beyond end of device [ 1120.379359] loop3: rw=1, want=98, limit=16 [ 1120.379388] attempt to access beyond end of device [ 1120.379396] loop3: rw=1, want=99, limit=16 [ 1120.379424] attempt to access beyond end of device [ 1120.379434] loop3: rw=1, want=100, limit=16 [ 1120.379463] attempt to access beyond end of device [ 1120.379471] loop3: rw=1, want=101, limit=16 [ 1120.379499] attempt to access beyond end of device [ 1120.379511] loop3: rw=1, want=103, limit=16 [ 1120.395133] loop5: rw=1, want=144, limit=16 [ 1120.468666] FAULT_INJECTION: forcing a failure. [ 1120.468666] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.486103] attempt to access beyond end of device [ 1120.486115] loop3: rw=1, want=104, limit=16 [ 1120.486146] attempt to access beyond end of device [ 1120.486156] loop3: rw=1, want=105, limit=16 [ 1120.486213] attempt to access beyond end of device [ 1120.486222] loop3: rw=1, want=106, limit=16 [ 1120.486252] attempt to access beyond end of device [ 1120.486260] loop3: rw=1, want=108, limit=16 [ 1120.486290] attempt to access beyond end of device [ 1120.486299] loop3: rw=1, want=109, limit=16 [ 1120.486328] attempt to access beyond end of device [ 1120.486337] loop3: rw=1, want=110, limit=16 [ 1120.486365] attempt to access beyond end of device [ 1120.486374] loop3: rw=1, want=111, limit=16 [ 1120.486403] attempt to access beyond end of device [ 1120.486411] loop3: rw=1, want=112, limit=16 [ 1120.486440] attempt to access beyond end of device [ 1120.486449] loop3: rw=1, want=113, limit=16 [ 1120.486478] attempt to access beyond end of device [ 1120.486487] loop3: rw=1, want=114, limit=16 [ 1120.486533] attempt to access beyond end of device [ 1120.486542] loop3: rw=1, want=115, limit=16 [ 1120.486577] attempt to access beyond end of device [ 1120.486585] loop3: rw=1, want=116, limit=16 [ 1120.486614] attempt to access beyond end of device [ 1120.486623] loop3: rw=1, want=117, limit=16 [ 1120.486652] attempt to access beyond end of device [ 1120.486660] loop3: rw=1, want=118, limit=16 [ 1120.486689] attempt to access beyond end of device [ 1120.486697] loop3: rw=1, want=120, limit=16 [ 1120.486726] attempt to access beyond end of device [ 1120.486734] loop3: rw=1, want=121, limit=16 [ 1120.486763] attempt to access beyond end of device [ 1120.486772] loop3: rw=1, want=122, limit=16 [ 1120.486801] attempt to access beyond end of device [ 1120.486810] loop3: rw=1, want=123, limit=16 [ 1120.486869] attempt to access beyond end of device [ 1120.486878] loop3: rw=1, want=131, limit=16 [ 1120.486928] attempt to access beyond end of device [ 1120.486937] loop3: rw=1, want=132, limit=16 [ 1120.486966] attempt to access beyond end of device [ 1120.486974] loop3: rw=1, want=133, limit=16 [ 1120.487003] attempt to access beyond end of device [ 1120.487012] loop3: rw=1, want=134, limit=16 [ 1120.487041] attempt to access beyond end of device [ 1120.487049] loop3: rw=1, want=135, limit=16 [ 1120.487078] attempt to access beyond end of device [ 1120.487087] loop3: rw=1, want=136, limit=16 [ 1120.487115] attempt to access beyond end of device [ 1120.487124] loop3: rw=1, want=158, limit=16 [ 1120.487152] attempt to access beyond end of device [ 1120.487161] loop3: rw=1, want=159, limit=16 [ 1120.487190] attempt to access beyond end of device [ 1120.487199] loop3: rw=1, want=160, limit=16 [ 1120.487347] attempt to access beyond end of device [ 1120.487356] loop3: rw=1, want=256, limit=16 [ 1120.500363] loop4: rw=1, want=97, limit=16 [ 1120.506116] CPU: 1 PID: 10618 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1120.513839] attempt to access beyond end of device [ 1120.514082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1120.518991] loop2: rw=1, want=74, limit=16 [ 1120.523194] Call Trace: [ 1120.523215] dump_stack+0x1fc/0x2ef [ 1120.523234] should_fail.cold+0xa/0xf [ 1120.523251] ? setup_fault_attr+0x200/0x200 [ 1120.523272] __should_failslab+0x115/0x180 [ 1120.523289] should_failslab+0x5/0x10 [ 1120.523302] __kmalloc+0x2ab/0x3c0 [ 1120.523313] ? ext4_find_extent+0x9bb/0xc70 [ 1120.523328] ext4_find_extent+0x9bb/0xc70 [ 1120.523350] ext4_ext_map_blocks+0x1c0/0x7390 [ 1120.523373] ? __lock_acquire+0x6de/0x3ff0 [ 1120.523394] ? __lock_acquire+0x6de/0x3ff0 [ 1120.523413] ? mark_held_locks+0xf0/0xf0 [ 1120.523435] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 1120.549742] attempt to access beyond end of device [ 1120.550831] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1120.555735] loop2: rw=1, want=75, limit=16 [ 1120.559952] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1120.559964] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1120.559982] ? rcu_nmi_exit+0xb3/0x180 [ 1120.559998] ? retint_kernel+0x2d/0x2d [ 1120.560018] ? lock_acquire+0x1ec/0x3c0 [ 1120.560047] ext4_da_get_block_prep+0xbf3/0x1430 [ 1121.005607] ? create_page_buffers+0x212/0x350 [ 1121.010185] ? ext4_journalled_invalidatepage+0x40/0x40 [ 1121.015533] ? ___preempt_schedule+0x16/0x18 [ 1121.019931] ? ___preempt_schedule+0x16/0x18 [ 1121.024336] ? _raw_spin_unlock+0x3b/0x40 [ 1121.028474] ? create_page_buffers+0x190/0x350 [ 1121.033048] __block_write_begin_int+0x46c/0x17b0 [ 1121.037881] ? ext4_journalled_invalidatepage+0x40/0x40 [ 1121.043245] ? __breadahead_gfp+0x130/0x130 [ 1121.047574] ext4_da_write_begin+0x4e1/0x10e0 [ 1121.052060] ? ext4_write_begin+0x1610/0x1610 [ 1121.056584] ? iov_iter_init+0x1d0/0x1d0 [ 1121.060639] generic_perform_write+0x1f8/0x4d0 [ 1121.065213] ? __mnt_drop_write_file+0x6f/0xa0 [ 1121.069782] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 1121.074442] ? current_time+0x1c0/0x1c0 [ 1121.078409] ? lock_acquire+0x170/0x3c0 [ 1121.082372] __generic_file_write_iter+0x24b/0x610 [ 1121.087295] ext4_file_write_iter+0x2fe/0xf20 [ 1121.091786] ? ext4_file_open+0x600/0x600 [ 1121.095928] ? lock_downgrade+0x720/0x720 [ 1121.100066] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1121.105084] aio_write+0x37f/0x5c0 [ 1121.108612] ? aio_setup_rw.isra.0+0x110/0x110 [ 1121.113182] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1121.118022] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1121.122774] ? rcu_nmi_exit+0xb3/0x180 [ 1121.126653] ? retint_kernel+0x2d/0x2d [ 1121.130541] ? io_submit_one+0x3e9/0x20c0 [ 1121.134688] io_submit_one+0xecd/0x20c0 [ 1121.138651] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1121.143392] ? aio_read+0x420/0x420 [ 1121.147021] ? __might_fault+0x11f/0x1d0 [ 1121.151085] __se_sys_io_submit+0x11b/0x4a0 [ 1121.155394] ? io_submit_one+0x20c0/0x20c0 [ 1121.159627] ? ksys_write+0x1c8/0x2a0 [ 1121.163423] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1121.168775] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1121.173776] ? do_syscall_64+0x21/0x620 [ 1121.177737] do_syscall_64+0xf9/0x620 [ 1121.181529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1121.186719] RIP: 0033:0x7f7032bb9209 [ 1121.190434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1121.209345] RSP: 002b:00007f703152e168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1121.217041] RAX: ffffffffffffffda RBX: 00007f7032ccbf60 RCX: 00007f7032bb9209 [ 1121.224316] RDX: 0000000020000540 RSI: 0000000000004011 RDI: 00007f7032ca7000 [ 1121.231587] RBP: 00007f703152e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1121.238870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.246136] R13: 00007ffcd10b36ff R14: 00007f703152e300 R15: 0000000000022000 [ 1121.253766] attempt to access beyond end of device [ 1121.258707] loop4: rw=1, want=121, limit=16 [ 1121.278647] attempt to access beyond end of device [ 1121.284215] attempt to access beyond end of device [ 1121.290230] loop4: rw=1, want=144, limit=16 10:39:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, 0x0) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1121.300545] loop2: rw=1, want=76, limit=16 [ 1121.304844] attempt to access beyond end of device [ 1121.318032] attempt to access beyond end of device [ 1121.323331] loop4: rw=1, want=153, limit=16 [ 1121.327727] attempt to access beyond end of device [ 1121.339133] loop2: rw=1, want=77, limit=16 [ 1121.349199] attempt to access beyond end of device [ 1121.354360] loop4: rw=1, want=154, limit=16 [ 1121.358726] attempt to access beyond end of device [ 1121.369566] loop2: rw=1, want=78, limit=16 [ 1121.373860] attempt to access beyond end of device [ 1121.378793] loop2: rw=1, want=80, limit=16 [ 1121.394374] loop4: rw=1, want=178, limit=16 [ 1121.408252] attempt to access beyond end of device [ 1121.413485] attempt to access beyond end of device [ 1121.418665] loop2: rw=1, want=81, limit=16 [ 1121.425348] loop4: rw=1, want=179, limit=16 [ 1121.430066] attempt to access beyond end of device [ 1121.435114] loop5: rw=1, want=145, limit=16 [ 1121.445511] attempt to access beyond end of device [ 1121.451327] attempt to access beyond end of device [ 1121.479748] loop4: rw=1, want=180, limit=16 [ 1121.484141] attempt to access beyond end of device [ 1121.489074] loop4: rw=1, want=181, limit=16 [ 1121.505568] attempt to access beyond end of device [ 1121.514488] loop5: rw=1, want=146, limit=16 [ 1121.522206] attempt to access beyond end of device [ 1121.527272] loop5: rw=1, want=170, limit=16 [ 1121.537391] loop2: rw=1, want=82, limit=16 [ 1121.554969] attempt to access beyond end of device [ 1121.563530] attempt to access beyond end of device [ 1121.572661] loop5: rw=1, want=207, limit=16 10:39:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1121.578997] loop2: rw=1, want=90, limit=16 [ 1121.591752] attempt to access beyond end of device [ 1121.597241] attempt to access beyond end of device [ 1121.598709] attempt to access beyond end of device [ 1121.612786] loop5: rw=1, want=241, limit=16 [ 1121.622517] loop2: rw=1, want=91, limit=16 [ 1121.631746] attempt to access beyond end of device [ 1121.637198] loop4: rw=1, want=182, limit=16 [ 1121.642875] attempt to access beyond end of device [ 1121.668178] loop5: rw=1, want=249, limit=16 [ 1121.677156] attempt to access beyond end of device [ 1121.687708] loop2: rw=1, want=92, limit=16 [ 1121.711523] attempt to access beyond end of device [ 1121.730142] attempt to access beyond end of device [ 1121.735098] loop2: rw=1, want=93, limit=16 [ 1121.744800] attempt to access beyond end of device [ 1121.750616] loop2: rw=1, want=94, limit=16 [ 1121.753181] loop4: rw=1, want=183, limit=16 [ 1121.754929] attempt to access beyond end of device [ 1121.759290] attempt to access beyond end of device [ 1121.764361] loop2: rw=1, want=95, limit=16 [ 1121.773652] attempt to access beyond end of device [ 1121.778591] loop2: rw=1, want=96, limit=16 [ 1121.783022] attempt to access beyond end of device [ 1121.787053] attempt to access beyond end of device [ 1121.787949] loop2: rw=1, want=98, limit=16 [ 1121.787992] attempt to access beyond end of device [ 1121.809505] loop5: rw=1, want=251, limit=16 [ 1121.820525] attempt to access beyond end of device [ 1121.832787] loop4: rw=1, want=184, limit=16 [ 1121.832883] loop2: rw=1, want=99, limit=16 [ 1121.840752] loop0: rw=2049, want=188, limit=16 [ 1121.843478] loop5: rw=1, want=252, limit=16 [ 1121.864485] attempt to access beyond end of device [ 1121.880365] attempt to access beyond end of device [ 1121.883683] loop3: rw=2049, want=48, limit=16 [ 1121.887654] attempt to access beyond end of device [ 1121.892530] attempt to access beyond end of device [ 1121.908131] loop3: rw=2049, want=129, limit=16 [ 1121.915855] attempt to access beyond end of device [ 1121.920264] attempt to access beyond end of device [ 1121.928049] loop5: rw=1, want=253, limit=16 [ 1121.931268] loop3: rw=2049, want=130, limit=16 [ 1121.948117] attempt to access beyond end of device [ 1121.950737] attempt to access beyond end of device 10:39:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x0, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1121.962693] loop4: rw=1, want=256, limit=16 [ 1121.965401] loop5: rw=1, want=254, limit=16 [ 1121.971582] attempt to access beyond end of device [ 1121.976596] loop5: rw=1, want=255, limit=16 [ 1121.981352] attempt to access beyond end of device [ 1121.983205] loop2: rw=1, want=107, limit=16 [ 1121.986487] loop5: rw=1, want=256, limit=16 [ 1121.995202] attempt to access beyond end of device [ 1122.000806] loop5: rw=1, want=257, limit=16 [ 1122.006826] loop3: rw=2049, want=131, limit=16 [ 1122.013848] attempt to access beyond end of device [ 1122.013861] loop2: rw=1, want=108, limit=16 [ 1122.013892] attempt to access beyond end of device [ 1122.013902] loop2: rw=1, want=109, limit=16 [ 1122.013931] attempt to access beyond end of device [ 1122.013940] loop2: rw=1, want=110, limit=16 [ 1122.013970] attempt to access beyond end of device [ 1122.013985] loop2: rw=1, want=111, limit=16 [ 1122.014015] attempt to access beyond end of device [ 1122.014024] loop2: rw=1, want=112, limit=16 [ 1122.014053] attempt to access beyond end of device [ 1122.014062] loop2: rw=1, want=126, limit=16 [ 1122.014091] attempt to access beyond end of device [ 1122.014100] loop2: rw=1, want=127, limit=16 [ 1122.014128] attempt to access beyond end of device [ 1122.014137] loop2: rw=1, want=128, limit=16 [ 1122.014322] attempt to access beyond end of device [ 1122.014332] loop2: rw=1, want=176, limit=16 [ 1122.014428] attempt to access beyond end of device [ 1122.014437] loop2: rw=1, want=201, limit=16 [ 1122.014493] attempt to access beyond end of device [ 1122.014502] loop2: rw=1, want=228, limit=16 [ 1122.014532] attempt to access beyond end of device [ 1122.014540] loop2: rw=1, want=229, limit=16 [ 1122.014570] attempt to access beyond end of device [ 1122.014579] loop2: rw=1, want=230, limit=16 [ 1122.014607] attempt to access beyond end of device [ 1122.014616] loop2: rw=1, want=232, limit=16 [ 1122.014645] attempt to access beyond end of device [ 1122.014653] loop2: rw=1, want=233, limit=16 [ 1122.014682] attempt to access beyond end of device [ 1122.014690] loop2: rw=1, want=234, limit=16 [ 1122.014719] attempt to access beyond end of device [ 1122.014728] loop2: rw=1, want=235, limit=16 [ 1122.014756] attempt to access beyond end of device [ 1122.014765] loop2: rw=1, want=236, limit=16 [ 1122.014841] attempt to access beyond end of device [ 1122.014850] loop2: rw=1, want=260, limit=16 [ 1122.360900] attempt to access beyond end of device [ 1122.366034] loop3: rw=2049, want=132, limit=16 [ 1122.372642] attempt to access beyond end of device [ 1122.380074] loop3: rw=2049, want=133, limit=16 [ 1122.385509] attempt to access beyond end of device [ 1122.391788] loop3: rw=2049, want=134, limit=16 [ 1122.397673] attempt to access beyond end of device [ 1122.403785] loop3: rw=2049, want=135, limit=16 [ 1122.409310] attempt to access beyond end of device [ 1122.418031] loop3: rw=2049, want=160, limit=16 [ 1122.447900] attempt to access beyond end of device [ 1122.461579] loop3: rw=2049, want=161, limit=16 [ 1122.466313] attempt to access beyond end of device [ 1122.473740] loop3: rw=2049, want=162, limit=16 [ 1122.478469] attempt to access beyond end of device [ 1122.549994] loop3: rw=2049, want=195, limit=16 [ 1122.571931] attempt to access beyond end of device [ 1122.592588] loop3: rw=2049, want=196, limit=16 [ 1122.609892] attempt to access beyond end of device [ 1122.618695] loop3: rw=2049, want=197, limit=16 [ 1122.625837] attempt to access beyond end of device [ 1122.631758] loop3: rw=2049, want=198, limit=16 [ 1122.636656] attempt to access beyond end of device [ 1122.680210] loop3: rw=2049, want=199, limit=16 [ 1122.692256] attempt to access beyond end of device [ 1122.707360] loop3: rw=2049, want=200, limit=16 [ 1122.732450] attempt to access beyond end of device 10:39:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4010, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1122.811550] attempt to access beyond end of device [ 1122.841822] loop3: rw=2049, want=240, limit=16 [ 1122.863382] attempt to access beyond end of device [ 1122.876268] loop5: rw=2049, want=32, limit=16 [ 1122.902345] loop4: rw=2049, want=17, limit=16 10:39:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1122.922690] attempt to access beyond end of device [ 1122.936559] attempt to access beyond end of device [ 1122.959483] attempt to access beyond end of device [ 1122.996309] attempt to access beyond end of device [ 1123.001468] loop3: rw=1, want=128, limit=16 [ 1123.008305] loop5: rw=2049, want=95, limit=16 [ 1123.008681] attempt to access beyond end of device [ 1123.017084] loop2: rw=2049, want=102, limit=16 [ 1123.019670] loop0: rw=2049, want=188, limit=16 [ 1123.027788] loop4: rw=2049, want=18, limit=16 [ 1123.031656] attempt to access beyond end of device [ 1123.039979] loop3: rw=1, want=159, limit=16 [ 1123.044839] attempt to access beyond end of device [ 1123.049919] loop3: rw=1, want=194, limit=16 [ 1123.054493] attempt to access beyond end of device [ 1123.057311] attempt to access beyond end of device [ 1123.059612] loop3: rw=1, want=232, limit=16 [ 1123.059707] attempt to access beyond end of device [ 1123.059717] loop3: rw=1, want=256, limit=16 [ 1123.060476] attempt to access beyond end of device [ 1123.075600] loop2: rw=2049, want=103, limit=16 [ 1123.083231] attempt to access beyond end of device [ 1123.097258] loop4: rw=2049, want=19, limit=16 [ 1123.103097] loop5: rw=2049, want=189, limit=16 [ 1123.109274] attempt to access beyond end of device [ 1123.117401] attempt to access beyond end of device [ 1123.118687] attempt to access beyond end of device [ 1123.125562] loop4: rw=2049, want=20, limit=16 [ 1123.175118] loop2: rw=2049, want=162, limit=16 [ 1123.178570] attempt to access beyond end of device [ 1123.178717] loop2: rw=2049, want=163, limit=16 [ 1123.180831] attempt to access beyond end of device [ 1123.187099] loop5: rw=2049, want=190, limit=16 [ 1123.197419] loop2: rw=2049, want=164, limit=16 [ 1123.208690] attempt to access beyond end of device [ 1123.215995] attempt to access beyond end of device [ 1123.224637] loop2: rw=2049, want=165, limit=16 [ 1123.253532] attempt to access beyond end of device [ 1123.257322] loop4: rw=2049, want=21, limit=16 [ 1123.260764] loop2: rw=2049, want=166, limit=16 [ 1123.281852] attempt to access beyond end of device [ 1123.282392] attempt to access beyond end of device [ 1123.299856] loop2: rw=2049, want=167, limit=16 [ 1123.300138] attempt to access beyond end of device [ 1123.319040] loop5: rw=2049, want=191, limit=16 [ 1123.326404] attempt to access beyond end of device [ 1123.326881] loop4: rw=2049, want=22, limit=16 [ 1123.333756] attempt to access beyond end of device [ 1123.350300] loop2: rw=2049, want=168, limit=16 [ 1123.410417] attempt to access beyond end of device [ 1123.437097] loop4: rw=2049, want=29, limit=16 [ 1123.446082] attempt to access beyond end of device [ 1123.459577] loop2: rw=1, want=88, limit=16 [ 1123.462545] attempt to access beyond end of device [ 1123.468451] attempt to access beyond end of device [ 1123.476207] loop4: rw=2049, want=52, limit=16 [ 1123.483372] loop5: rw=2049, want=192, limit=16 [ 1123.499007] attempt to access beyond end of device [ 1123.503572] attempt to access beyond end of device [ 1123.517837] attempt to access beyond end of device [ 1123.521567] loop2: rw=1, want=89, limit=16 [ 1123.523122] loop4: rw=2049, want=231, limit=16 [ 1123.531901] loop3: rw=2049, want=64, limit=16 [ 1123.532211] loop5: rw=2049, want=193, limit=16 [ 1123.536600] attempt to access beyond end of device [ 1123.541316] attempt to access beyond end of device [ 1123.541327] loop5: rw=2049, want=194, limit=16 [ 1123.541360] attempt to access beyond end of device [ 1123.541369] loop5: rw=2049, want=195, limit=16 [ 1123.576844] attempt to access beyond end of device 10:39:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x0, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1123.586894] loop3: rw=2049, want=97, limit=16 [ 1123.597401] attempt to access beyond end of device [ 1123.606017] loop3: rw=2049, want=100, limit=16 [ 1123.612104] loop2: rw=1, want=90, limit=16 [ 1123.619057] attempt to access beyond end of device [ 1123.628228] attempt to access beyond end of device 10:39:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1123.634285] loop3: rw=2049, want=101, limit=16 [ 1123.641039] attempt to access beyond end of device [ 1123.646002] loop4: rw=1, want=23, limit=16 [ 1123.651383] attempt to access beyond end of device [ 1123.656433] loop5: rw=1, want=88, limit=16 [ 1123.661768] attempt to access beyond end of device [ 1123.663048] loop2: rw=1, want=91, limit=16 [ 1123.666896] attempt to access beyond end of device [ 1123.677951] attempt to access beyond end of device [ 1123.685081] loop3: rw=2049, want=102, limit=16 [ 1123.691007] attempt to access beyond end of device [ 1123.696073] loop5: rw=1, want=89, limit=16 [ 1123.696488] loop4: rw=1, want=24, limit=16 [ 1123.707291] attempt to access beyond end of device [ 1123.707417] attempt to access beyond end of device [ 1123.713778] attempt to access beyond end of device [ 1123.718935] loop2: rw=1, want=92, limit=16 [ 1123.727585] loop3: rw=2049, want=103, limit=16 [ 1123.730581] attempt to access beyond end of device [ 1123.742880] loop2: rw=1, want=93, limit=16 [ 1123.754000] loop5: rw=1, want=90, limit=16 [ 1123.755704] attempt to access beyond end of device [ 1123.771687] loop4: rw=1, want=25, limit=16 [ 1123.782307] attempt to access beyond end of device [ 1123.785109] attempt to access beyond end of device [ 1123.792766] attempt to access beyond end of device [ 1123.794678] loop3: rw=2049, want=104, limit=16 [ 1123.816462] loop4: rw=1, want=26, limit=16 [ 1123.825107] attempt to access beyond end of device [ 1123.826225] loop2: rw=1, want=94, limit=16 [ 1123.836793] attempt to access beyond end of device [ 1123.839064] loop5: rw=1, want=91, limit=16 [ 1123.844720] loop3: rw=2049, want=105, limit=16 [ 1123.894575] loop4: rw=1, want=27, limit=16 [ 1123.900348] attempt to access beyond end of device [ 1123.903737] attempt to access beyond end of device [ 1123.905716] attempt to access beyond end of device [ 1123.923685] attempt to access beyond end of device [ 1123.931911] loop2: rw=1, want=104, limit=16 [ 1123.936360] loop4: rw=1, want=28, limit=16 [ 1123.937387] loop5: rw=1, want=92, limit=16 10:39:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4012, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1123.946554] loop3: rw=2049, want=106, limit=16 [ 1123.959756] attempt to access beyond end of device [ 1123.978516] attempt to access beyond end of device [ 1123.987207] attempt to access beyond end of device [ 1123.988828] loop5: rw=1, want=93, limit=16 [ 1124.003738] attempt to access beyond end of device [ 1124.008906] loop2: rw=1, want=105, limit=16 [ 1124.011180] attempt to access beyond end of device [ 1124.019203] loop4: rw=1, want=30, limit=16 [ 1124.026092] loop5: rw=1, want=94, limit=16 [ 1124.029740] attempt to access beyond end of device [ 1124.036636] loop3: rw=2049, want=107, limit=16 [ 1124.044911] attempt to access beyond end of device [ 1124.045006] loop2: rw=1, want=161, limit=16 [ 1124.050273] loop0: rw=2049, want=188, limit=16 [ 1124.057811] attempt to access beyond end of device [ 1124.065227] attempt to access beyond end of device [ 1124.075515] attempt to access beyond end of device [ 1124.081058] loop3: rw=2049, want=108, limit=16 [ 1124.086304] attempt to access beyond end of device [ 1124.089530] attempt to access beyond end of device [ 1124.091898] loop3: rw=2049, want=111, limit=16 [ 1124.097113] loop4: rw=1, want=31, limit=16 [ 1124.101477] attempt to access beyond end of device [ 1124.108188] loop5: rw=1, want=96, limit=16 [ 1124.110694] loop3: rw=2049, want=116, limit=16 [ 1124.118116] loop2: rw=1, want=257, limit=16 [ 1124.119879] attempt to access beyond end of device [ 1124.126967] attempt to access beyond end of device [ 1124.128524] loop3: rw=2049, want=140, limit=16 [ 1124.137909] attempt to access beyond end of device [ 1124.138660] attempt to access beyond end of device 10:39:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x0, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1124.156145] loop4: rw=1, want=47, limit=16 [ 1124.166306] loop3: rw=2049, want=141, limit=16 [ 1124.176456] attempt to access beyond end of device [ 1124.176570] attempt to access beyond end of device [ 1124.188166] loop4: rw=1, want=48, limit=16 [ 1124.192256] loop5: rw=1, want=97, limit=16 [ 1124.196854] attempt to access beyond end of device [ 1124.197905] attempt to access beyond end of device [ 1124.202731] loop3: rw=2049, want=143, limit=16 [ 1124.219777] loop4: rw=1, want=49, limit=16 [ 1124.221077] loop5: rw=1, want=185, limit=16 [ 1124.228440] attempt to access beyond end of device [ 1124.236907] attempt to access beyond end of device [ 1124.238022] attempt to access beyond end of device [ 1124.260676] loop3: rw=2049, want=144, limit=16 [ 1124.266792] loop5: rw=1, want=186, limit=16 [ 1124.280479] loop4: rw=1, want=50, limit=16 [ 1124.283574] attempt to access beyond end of device [ 1124.293361] attempt to access beyond end of device [ 1124.301876] attempt to access beyond end of device [ 1124.304718] loop3: rw=2049, want=248, limit=16 [ 1124.313008] loop4: rw=1, want=51, limit=16 [ 1124.320034] loop5: rw=1, want=187, limit=16 [ 1124.325140] attempt to access beyond end of device [ 1124.332353] loop5: rw=1, want=188, limit=16 [ 1124.335331] attempt to access beyond end of device [ 1124.336772] attempt to access beyond end of device [ 1124.345423] loop4: rw=1, want=53, limit=16 [ 1124.349328] loop5: rw=1, want=199, limit=16 10:39:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1124.396938] attempt to access beyond end of device [ 1124.422507] attempt to access beyond end of device [ 1124.427976] attempt to access beyond end of device [ 1124.433827] loop3: rw=1, want=96, limit=16 [ 1124.455429] loop5: rw=1, want=200, limit=16 [ 1124.460562] attempt to access beyond end of device [ 1124.514364] loop4: rw=1, want=54, limit=16 [ 1124.537480] loop3: rw=1, want=98, limit=16 [ 1124.538075] attempt to access beyond end of device [ 1124.545495] attempt to access beyond end of device [ 1124.567698] attempt to access beyond end of device [ 1124.604856] attempt to access beyond end of device [ 1124.611298] loop4: rw=1, want=55, limit=16 [ 1124.615737] loop2: rw=2049, want=32, limit=16 [ 1124.621947] loop3: rw=1, want=99, limit=16 [ 1124.626357] attempt to access beyond end of device [ 1124.627440] loop5: rw=1, want=201, limit=16 [ 1124.633637] attempt to access beyond end of device [ 1124.641889] attempt to access beyond end of device [ 1124.646964] loop4: rw=1, want=56, limit=16 [ 1124.652841] loop3: rw=1, want=109, limit=16 [ 1124.662476] loop2: rw=2049, want=33, limit=16 [ 1124.667411] attempt to access beyond end of device [ 1124.675576] attempt to access beyond end of device [ 1124.685538] attempt to access beyond end of device [ 1124.698007] attempt to access beyond end of device [ 1124.707098] loop5: rw=1, want=202, limit=16 [ 1124.712366] loop4: rw=1, want=208, limit=16 [ 1124.722485] loop3: rw=1, want=110, limit=16 [ 1124.732484] attempt to access beyond end of device [ 1124.737591] loop2: rw=2049, want=34, limit=16 [ 1124.738600] attempt to access beyond end of device [ 1124.744655] attempt to access beyond end of device [ 1124.747696] loop0: rw=2049, want=188, limit=16 [ 1124.758363] attempt to access beyond end of device [ 1124.759991] loop5: rw=1, want=203, limit=16 [ 1124.767849] attempt to access beyond end of device [ 1124.773048] loop5: rw=1, want=259, limit=16 [ 1124.779664] attempt to access beyond end of device [ 1124.782510] loop3: rw=1, want=112, limit=16 [ 1124.784859] loop2: rw=2049, want=35, limit=16 [ 1124.793676] loop4: rw=1, want=209, limit=16 [ 1124.793727] attempt to access beyond end of device [ 1124.793743] loop4: rw=1, want=210, limit=16 10:39:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x0, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1124.793773] attempt to access beyond end of device [ 1124.793782] loop4: rw=1, want=211, limit=16 [ 1124.794765] attempt to access beyond end of device [ 1124.803459] attempt to access beyond end of device [ 1124.825257] loop4: rw=1, want=212, limit=16 [ 1124.827684] loop3: rw=1, want=113, limit=16 [ 1124.836491] attempt to access beyond end of device [ 1124.843270] attempt to access beyond end of device [ 1124.866610] loop2: rw=2049, want=52, limit=16 [ 1124.868305] loop3: rw=1, want=114, limit=16 [ 1124.875470] attempt to access beyond end of device [ 1124.881566] attempt to access beyond end of device [ 1124.887132] loop3: rw=1, want=115, limit=16 [ 1124.893024] attempt to access beyond end of device [ 1124.895571] attempt to access beyond end of device [ 1124.898074] loop3: rw=1, want=132, limit=16 [ 1124.911948] attempt to access beyond end of device [ 1124.917250] loop4: rw=1, want=213, limit=16 [ 1124.941153] loop2: rw=2049, want=53, limit=16 [ 1124.955790] attempt to access beyond end of device [ 1124.964345] loop3: rw=1, want=133, limit=16 [ 1124.966962] attempt to access beyond end of device [ 1125.015080] loop2: rw=2049, want=54, limit=16 [ 1125.021900] attempt to access beyond end of device [ 1125.028088] loop4: rw=1, want=214, limit=16 [ 1125.045508] attempt to access beyond end of device [ 1125.046401] attempt to access beyond end of device [ 1125.051980] loop3: rw=1, want=134, limit=16 [ 1125.061284] loop4: rw=1, want=215, limit=16 [ 1125.065769] attempt to access beyond end of device [ 1125.071781] attempt to access beyond end of device [ 1125.076835] loop3: rw=1, want=135, limit=16 [ 1125.083861] attempt to access beyond end of device [ 1125.088939] loop3: rw=1, want=136, limit=16 [ 1125.094352] attempt to access beyond end of device [ 1125.098249] loop4: rw=1, want=232, limit=16 [ 1125.101208] loop3: rw=1, want=137, limit=16 [ 1125.109785] buffer_io_error: 220 callbacks suppressed [ 1125.109794] Buffer I/O error on dev loop3, logical block 136, lost async page write [ 1125.115947] Buffer I/O error on dev loop4, logical block 231, lost async page write [ 1125.127832] loop2: rw=2049, want=55, limit=16 [ 1125.142721] Buffer I/O error on dev loop2, logical block 54, lost async page write [ 1125.151135] attempt to access beyond end of device [ 1125.157739] attempt to access beyond end of device [ 1125.176470] loop3: rw=1, want=138, limit=16 [ 1125.179542] loop5: rw=2049, want=32, limit=16 [ 1125.182039] attempt to access beyond end of device [ 1125.200196] Buffer I/O error on dev loop3, logical block 137, lost async page write [ 1125.213317] attempt to access beyond end of device [ 1125.218353] loop2: rw=2049, want=56, limit=16 10:39:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4016, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1125.227788] attempt to access beyond end of device [ 1125.230922] attempt to access beyond end of device [ 1125.234879] loop4: rw=1, want=256, limit=16 [ 1125.242815] Buffer I/O error on dev loop2, logical block 55, lost async page write [ 1125.245806] loop5: rw=2049, want=33, limit=16 [ 1125.269290] loop3: rw=1, want=139, limit=16 [ 1125.270909] Buffer I/O error on dev loop5, logical block 32, lost async page write [ 1125.284642] attempt to access beyond end of device [ 1125.288547] attempt to access beyond end of device [ 1125.294168] loop5: rw=2049, want=50, limit=16 [ 1125.299661] Buffer I/O error on dev loop3, logical block 138, lost async page write [ 1125.304561] Buffer I/O error on dev loop5, logical block 49, lost async page write [ 1125.325795] loop2: rw=2049, want=73, limit=16 [ 1125.331002] attempt to access beyond end of device [ 1125.341829] loop5: rw=2049, want=59, limit=16 [ 1125.350518] Buffer I/O error on dev loop5, logical block 58, lost async page write [ 1125.352030] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 1125.358857] attempt to access beyond end of device 10:39:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x0, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1125.378479] loop5: rw=2049, want=60, limit=16 [ 1125.379067] attempt to access beyond end of device [ 1125.384771] attempt to access beyond end of device [ 1125.405027] loop5: rw=2049, want=61, limit=16 [ 1125.411637] attempt to access beyond end of device [ 1125.416870] attempt to access beyond end of device [ 1125.424536] loop3: rw=1, want=142, limit=16 [ 1125.433884] loop5: rw=2049, want=62, limit=16 [ 1125.438573] loop2: rw=2049, want=103, limit=16 [ 1125.445710] attempt to access beyond end of device [ 1125.445814] attempt to access beyond end of device [ 1125.451145] attempt to access beyond end of device [ 1125.461505] loop2: rw=2049, want=104, limit=16 [ 1125.466232] attempt to access beyond end of device [ 1125.486647] loop2: rw=2049, want=105, limit=16 [ 1125.497863] attempt to access beyond end of device [ 1125.504703] loop2: rw=2049, want=106, limit=16 [ 1125.510033] attempt to access beyond end of device [ 1125.520748] loop5: rw=2049, want=63, limit=16 [ 1125.541192] loop2: rw=2049, want=107, limit=16 [ 1125.564090] loop3: rw=1, want=240, limit=16 [ 1125.574496] attempt to access beyond end of device [ 1125.574616] attempt to access beyond end of device [ 1125.602970] attempt to access beyond end of device [ 1125.617421] loop5: rw=2049, want=64, limit=16 [ 1125.639588] loop2: rw=2049, want=115, limit=16 [ 1125.640377] attempt to access beyond end of device [ 1125.651115] loop3: rw=1, want=260, limit=16 [ 1125.661336] attempt to access beyond end of device [ 1125.672187] attempt to access beyond end of device [ 1125.685403] loop5: rw=2049, want=97, limit=16 [ 1125.698854] loop4: rw=2049, want=32, limit=16 [ 1125.708480] loop2: rw=2049, want=128, limit=16 [ 1125.718869] attempt to access beyond end of device [ 1125.752835] attempt to access beyond end of device [ 1125.778885] loop5: rw=2049, want=130, limit=16 [ 1125.803979] loop4: rw=2049, want=33, limit=16 [ 1125.807246] attempt to access beyond end of device [ 1125.814273] loop0: rw=2049, want=188, limit=16 [ 1125.827146] attempt to access beyond end of device [ 1125.833203] loop5: rw=2049, want=160, limit=16 [ 1125.837941] attempt to access beyond end of device [ 1125.843508] loop5: rw=2049, want=161, limit=16 [ 1125.848214] attempt to access beyond end of device 10:39:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x0, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1125.853910] loop5: rw=2049, want=162, limit=16 [ 1125.858620] attempt to access beyond end of device [ 1125.865115] attempt to access beyond end of device [ 1125.876364] attempt to access beyond end of device [ 1125.876372] loop5: rw=2049, want=163, limit=16 [ 1125.882631] attempt to access beyond end of device [ 1125.916059] loop5: rw=2049, want=164, limit=16 [ 1125.923720] attempt to access beyond end of device [ 1125.928862] loop5: rw=2049, want=165, limit=16 [ 1125.930580] loop2: rw=1, want=51, limit=16 [ 1125.941734] attempt to access beyond end of device [ 1125.945203] loop4: rw=2049, want=34, limit=16 [ 1125.946754] loop5: rw=2049, want=249, limit=16 [ 1125.962539] attempt to access beyond end of device [ 1125.972268] attempt to access beyond end of device [ 1125.982756] loop2: rw=1, want=72, limit=16 [ 1126.003718] loop4: rw=2049, want=35, limit=16 [ 1126.010160] attempt to access beyond end of device [ 1126.021007] attempt to access beyond end of device [ 1126.026983] loop2: rw=1, want=97, limit=16 [ 1126.043321] loop4: rw=2049, want=36, limit=16 [ 1126.048089] attempt to access beyond end of device [ 1126.050488] attempt to access beyond end of device [ 1126.070688] loop5: rw=1, want=49, limit=16 [ 1126.096846] attempt to access beyond end of device [ 1126.100861] attempt to access beyond end of device [ 1126.113855] loop2: rw=1, want=98, limit=16 [ 1126.137898] loop5: rw=1, want=58, limit=16 [ 1126.149000] loop4: rw=2049, want=37, limit=16 [ 1126.153557] attempt to access beyond end of device [ 1126.158032] attempt to access beyond end of device [ 1126.177096] loop5: rw=1, want=96, limit=16 [ 1126.183202] loop2: rw=1, want=99, limit=16 [ 1126.192245] attempt to access beyond end of device [ 1126.199927] attempt to access beyond end of device [ 1126.216219] loop5: rw=1, want=129, limit=16 [ 1126.223390] loop4: rw=2049, want=62, limit=16 [ 1126.225288] attempt to access beyond end of device [ 1126.236445] attempt to access beyond end of device [ 1126.245630] attempt to access beyond end of device [ 1126.261827] loop5: rw=1, want=154, limit=16 [ 1126.268664] loop4: rw=2049, want=79, limit=16 [ 1126.282466] attempt to access beyond end of device [ 1126.287651] loop2: rw=1, want=100, limit=16 [ 1126.295824] attempt to access beyond end of device [ 1126.309310] attempt to access beyond end of device [ 1126.319773] loop5: rw=1, want=155, limit=16 [ 1126.326610] loop4: rw=2049, want=90, limit=16 [ 1126.339593] attempt to access beyond end of device [ 1126.349888] attempt to access beyond end of device [ 1126.355032] loop2: rw=1, want=101, limit=16 [ 1126.367808] loop5: rw=1, want=156, limit=16 [ 1126.371710] attempt to access beyond end of device [ 1126.376004] attempt to access beyond end of device [ 1126.378820] loop0: rw=2049, want=188, limit=16 [ 1126.384604] loop4: rw=2049, want=155, limit=16 [ 1126.393564] attempt to access beyond end of device [ 1126.399887] loop5: rw=1, want=157, limit=16 [ 1126.404781] loop2: rw=1, want=102, limit=16 [ 1126.410591] attempt to access beyond end of device [ 1126.415148] attempt to access beyond end of device [ 1126.416689] loop2: rw=1, want=108, limit=16 [ 1126.424117] attempt to access beyond end of device [ 1126.426843] attempt to access beyond end of device [ 1126.438895] loop5: rw=1, want=158, limit=16 [ 1126.441271] loop2: rw=1, want=109, limit=16 [ 1126.448909] loop4: rw=2049, want=182, limit=16 [ 1126.453790] attempt to access beyond end of device [ 1126.453803] loop5: rw=1, want=159, limit=16 [ 1126.463665] attempt to access beyond end of device [ 1126.475321] loop2: rw=1, want=110, limit=16 [ 1126.478737] attempt to access beyond end of device [ 1126.486949] attempt to access beyond end of device [ 1126.491675] attempt to access beyond end of device [ 1126.503286] loop4: rw=2049, want=227, limit=16 [ 1126.507233] loop5: rw=1, want=166, limit=16 [ 1126.507937] loop2: rw=1, want=111, limit=16 [ 1126.518567] attempt to access beyond end of device [ 1126.521426] attempt to access beyond end of device [ 1126.528738] loop4: rw=2049, want=228, limit=16 [ 1126.530745] loop5: rw=1, want=167, limit=16 [ 1126.539132] attempt to access beyond end of device [ 1126.539684] attempt to access beyond end of device [ 1126.546410] attempt to access beyond end of device [ 1126.558917] loop5: rw=1, want=168, limit=16 [ 1126.563939] loop2: rw=1, want=112, limit=16 [ 1126.573089] attempt to access beyond end of device [ 1126.583165] loop4: rw=2049, want=229, limit=16 [ 1126.593574] attempt to access beyond end of device [ 1126.601443] attempt to access beyond end of device [ 1126.608586] loop5: rw=1, want=192, limit=16 [ 1126.614217] loop2: rw=1, want=113, limit=16 [ 1126.617515] loop4: rw=2049, want=230, limit=16 [ 1126.633129] attempt to access beyond end of device [ 1126.636819] attempt to access beyond end of device [ 1126.638129] loop4: rw=2049, want=231, limit=16 [ 1126.645482] attempt to access beyond end of device [ 1126.656416] attempt to access beyond end of device [ 1126.669078] loop4: rw=2049, want=232, limit=16 [ 1126.671571] loop5: rw=1, want=193, limit=16 [ 1126.675133] loop2: rw=1, want=114, limit=16 [ 1126.688383] attempt to access beyond end of device [ 1126.695992] attempt to access beyond end of device [ 1126.705834] loop5: rw=1, want=250, limit=16 [ 1126.710749] loop2: rw=1, want=116, limit=16 [ 1126.712883] attempt to access beyond end of device [ 1126.715158] attempt to access beyond end of device [ 1126.722994] loop5: rw=1, want=251, limit=16 [ 1126.726321] loop2: rw=1, want=117, limit=16 [ 1126.734798] attempt to access beyond end of device [ 1126.739946] attempt to access beyond end of device [ 1126.740084] loop2: rw=1, want=118, limit=16 [ 1126.744931] loop5: rw=1, want=252, limit=16 10:39:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4017, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) (fail_nth: 1) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1126.749783] attempt to access beyond end of device [ 1126.758868] loop2: rw=1, want=119, limit=16 [ 1126.764087] attempt to access beyond end of device [ 1126.767649] attempt to access beyond end of device [ 1126.778067] loop2: rw=1, want=127, limit=16 [ 1126.783764] attempt to access beyond end of device [ 1126.788803] attempt to access beyond end of device [ 1126.795452] loop5: rw=1, want=253, limit=16 [ 1126.799313] loop4: rw=1, want=61, limit=16 [ 1126.804284] loop2: rw=1, want=152, limit=16 [ 1126.804530] attempt to access beyond end of device [ 1126.810431] attempt to access beyond end of device [ 1126.819946] loop5: rw=1, want=254, limit=16 [ 1126.825798] attempt to access beyond end of device [ 1126.831157] loop4: rw=1, want=78, limit=16 [ 1126.832137] attempt to access beyond end of device [ 1126.838268] attempt to access beyond end of device [ 1126.841360] loop2: rw=1, want=153, limit=16 [ 1126.850829] loop5: rw=1, want=255, limit=16 [ 1126.855256] attempt to access beyond end of device [ 1126.861490] attempt to access beyond end of device [ 1126.866031] loop4: rw=1, want=87, limit=16 [ 1126.868529] loop2: rw=1, want=156, limit=16 [ 1126.876517] loop5: rw=1, want=256, limit=16 [ 1126.881720] attempt to access beyond end of device [ 1126.897151] loop2: rw=1, want=157, limit=16 [ 1126.903334] attempt to access beyond end of device [ 1126.908333] loop2: rw=1, want=158, limit=16 [ 1126.913820] attempt to access beyond end of device [ 1126.917580] attempt to access beyond end of device [ 1126.918797] loop2: rw=1, want=159, limit=16 [ 1126.948833] attempt to access beyond end of device [ 1126.968027] loop4: rw=1, want=88, limit=16 [ 1127.008605] loop2: rw=1, want=160, limit=16 [ 1127.021193] attempt to access beyond end of device [ 1127.045481] attempt to access beyond end of device [ 1127.080538] loop4: rw=1, want=89, limit=16 [ 1127.095148] loop2: rw=1, want=161, limit=16 [ 1127.113822] attempt to access beyond end of device [ 1127.133800] loop4: rw=1, want=91, limit=16 [ 1127.144559] attempt to access beyond end of device [ 1127.145199] attempt to access beyond end of device [ 1127.172158] loop2: rw=1, want=162, limit=16 10:39:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1127.188616] loop4: rw=1, want=92, limit=16 [ 1127.210406] attempt to access beyond end of device [ 1127.228860] attempt to access beyond end of device [ 1127.257514] loop2: rw=1, want=178, limit=16 [ 1127.282748] attempt to access beyond end of device [ 1127.301272] loop4: rw=1, want=93, limit=16 [ 1127.310058] loop2: rw=1, want=179, limit=16 [ 1127.333192] attempt to access beyond end of device [ 1127.357798] attempt to access beyond end of device [ 1127.388418] loop2: rw=1, want=180, limit=16 [ 1127.425516] loop4: rw=1, want=94, limit=16 [ 1127.492065] attempt to access beyond end of device [ 1127.497497] attempt to access beyond end of device [ 1127.526568] attempt to access beyond end of device [ 1127.564507] loop2: rw=1, want=182, limit=16 [ 1127.570326] loop0: rw=2049, want=188, limit=16 [ 1127.570553] FAULT_INJECTION: forcing a failure. [ 1127.570553] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.604981] loop4: rw=1, want=95, limit=16 [ 1127.608732] CPU: 1 PID: 10799 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1127.612143] attempt to access beyond end of device [ 1127.617105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1127.617111] Call Trace: [ 1127.617133] dump_stack+0x1fc/0x2ef [ 1127.617151] should_fail.cold+0xa/0xf [ 1127.617169] ? setup_fault_attr+0x200/0x200 [ 1127.645723] ? lock_acquire+0x170/0x3c0 [ 1127.649703] __should_failslab+0x115/0x180 [ 1127.653941] should_failslab+0x5/0x10 [ 1127.654659] attempt to access beyond end of device [ 1127.657741] kmem_cache_alloc+0x277/0x370 [ 1127.657760] io_submit_one+0x11e/0x20c0 [ 1127.657780] ? aio_read+0x420/0x420 [ 1127.674397] ? lock_release+0x440/0x8b0 [ 1127.678393] __se_sys_io_submit+0x11b/0x4a0 [ 1127.682723] ? io_submit_one+0x20c0/0x20c0 [ 1127.686963] ? ksys_write+0x1c8/0x2a0 [ 1127.690781] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1127.696150] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1127.696306] loop2: rw=1, want=183, limit=16 [ 1127.701163] ? do_syscall_64+0x21/0x620 [ 1127.701179] do_syscall_64+0xf9/0x620 [ 1127.701197] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1127.701208] RIP: 0033:0x7fd330b44209 [ 1127.701222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1127.701228] RSP: 002b:00007fd32f4b9168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1127.701241] RAX: ffffffffffffffda RBX: 00007fd330c56f60 RCX: 00007fd330b44209 [ 1127.701250] RDX: 0000000020000540 RSI: 0000000000004011 RDI: 00007fd330c32000 [ 1127.701256] RBP: 00007fd32f4b91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1127.701263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.701270] R13: 00007ffc117096bf R14: 00007fd32f4b9300 R15: 0000000000022000 [ 1127.734545] loop4: rw=1, want=96, limit=16 [ 1127.744608] attempt to access beyond end of device [ 1127.789972] attempt to access beyond end of device [ 1127.791322] loop2: rw=1, want=184, limit=16 [ 1127.804321] loop4: rw=1, want=152, limit=16 [ 1127.805664] attempt to access beyond end of device [ 1127.814920] loop2: rw=1, want=185, limit=16 [ 1127.819891] attempt to access beyond end of device [ 1127.821374] attempt to access beyond end of device [ 1127.824879] loop2: rw=1, want=186, limit=16 [ 1127.835629] attempt to access beyond end of device [ 1127.846765] loop4: rw=1, want=153, limit=16 [ 1127.848460] loop2: rw=1, want=187, limit=16 10:39:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1127.856480] attempt to access beyond end of device [ 1127.863614] loop2: rw=1, want=259, limit=16 [ 1127.871956] attempt to access beyond end of device [ 1127.876948] loop4: rw=1, want=154, limit=16 [ 1127.891552] attempt to access beyond end of device [ 1127.896668] loop5: rw=1, want=256, limit=16 10:39:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) (fail_nth: 2) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1127.902148] attempt to access beyond end of device [ 1127.907241] loop4: rw=1, want=156, limit=16 [ 1127.916974] attempt to access beyond end of device [ 1127.934006] loop4: rw=1, want=157, limit=16 [ 1127.938384] attempt to access beyond end of device [ 1127.964849] loop4: rw=1, want=158, limit=16 [ 1127.974607] attempt to access beyond end of device [ 1127.987564] loop4: rw=1, want=159, limit=16 [ 1127.997796] attempt to access beyond end of device [ 1128.004273] loop4: rw=1, want=160, limit=16 [ 1128.008690] attempt to access beyond end of device [ 1128.019440] loop4: rw=1, want=161, limit=16 [ 1128.024247] attempt to access beyond end of device [ 1128.030796] loop4: rw=1, want=177, limit=16 [ 1128.035406] attempt to access beyond end of device [ 1128.041808] loop4: rw=1, want=178, limit=16 [ 1128.063867] attempt to access beyond end of device [ 1128.195070] loop4: rw=1, want=179, limit=16 10:39:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1128.251414] attempt to access beyond end of device [ 1128.314475] loop4: rw=1, want=180, limit=16 [ 1128.315746] FAULT_INJECTION: forcing a failure. [ 1128.315746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1128.324588] attempt to access beyond end of device [ 1128.359931] attempt to access beyond end of device [ 1128.380395] loop2: rw=2049, want=17, limit=16 [ 1128.394581] loop4: rw=1, want=181, limit=16 [ 1128.421423] attempt to access beyond end of device [ 1128.426731] CPU: 0 PID: 10827 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1128.434612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1128.443958] Call Trace: [ 1128.446553] dump_stack+0x1fc/0x2ef [ 1128.450184] should_fail.cold+0xa/0xf [ 1128.453988] ? lock_acquire+0x170/0x3c0 [ 1128.457961] ? setup_fault_attr+0x200/0x200 [ 1128.462291] __alloc_pages_nodemask+0x239/0x2890 [ 1128.467052] ? rcu_nmi_exit+0xb3/0x180 [ 1128.470940] ? retint_kernel+0x2d/0x2d [ 1128.474834] ? mark_held_locks+0xa6/0xf0 [ 1128.478897] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1128.483739] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1128.488327] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1128.493084] ? rcu_nmi_exit+0xb3/0x180 [ 1128.496977] ? retint_kernel+0x2d/0x2d [ 1128.500874] ? alloc_pages_current+0x155/0x2a0 [ 1128.505461] alloc_pages_current+0x193/0x2a0 [ 1128.509874] pagecache_get_page+0x5bb/0xd50 [ 1128.514262] ? fat_add_cluster+0xf0/0xf0 [ 1128.518325] grab_cache_page_write_begin+0x6a/0xa0 [ 1128.523256] block_write_begin+0x33/0x2e0 [ 1128.527408] cont_write_begin+0x55a/0x820 [ 1128.531559] ? __lock_acquire+0x6de/0x3ff0 [ 1128.535798] ? fat_add_cluster+0xf0/0xf0 [ 1128.537629] attempt to access beyond end of device [ 1128.539859] ? block_write_begin+0x2e0/0x2e0 [ 1128.539873] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1128.539890] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1128.539903] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1128.539916] ? mark_held_locks+0xf0/0xf0 [ 1128.539934] fat_write_begin+0x89/0x180 [ 1128.544876] loop4: rw=1, want=183, limit=16 [ 1128.549241] ? fat_add_cluster+0xf0/0xf0 [ 1128.549260] cont_write_begin+0x61c/0x820 [ 1128.549278] ? rcu_nmi_exit+0xb3/0x180 [ 1128.549293] ? fat_add_cluster+0xf0/0xf0 [ 1128.554098] attempt to access beyond end of device [ 1128.558600] ? block_write_begin+0x2e0/0x2e0 [ 1128.558621] ? ktime_get_coarse_real_ts64+0x1ec/0x290 [ 1128.563990] loop4: rw=1, want=184, limit=16 [ 1128.567394] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 1128.567415] fat_write_begin+0x89/0x180 [ 1128.571448] attempt to access beyond end of device [ 1128.575666] ? fat_add_cluster+0xf0/0xf0 [ 1128.575684] generic_perform_write+0x1f8/0x4d0 [ 1128.575707] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 1128.579792] loop4: rw=1, want=185, limit=16 [ 1128.583867] ? current_time+0x1c0/0x1c0 [ 1128.583891] ? lock_acquire+0x1ec/0x3c0 [ 1128.587803] attempt to access beyond end of device [ 1128.591795] __generic_file_write_iter+0x24b/0x610 [ 1128.591814] generic_file_write_iter+0x3f8/0x730 [ 1128.591834] aio_write+0x37f/0x5c0 [ 1128.596764] loop4: rw=1, want=186, limit=16 [ 1128.601146] ? aio_setup_rw.isra.0+0x110/0x110 [ 1128.601160] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1128.601182] ? rcu_nmi_exit+0xb3/0x180 [ 1128.606472] attempt to access beyond end of device [ 1128.610661] ? lock_downgrade+0x720/0x720 [ 1128.610675] ? lock_acquire+0x1ec/0x3c0 [ 1128.610699] io_submit_one+0xecd/0x20c0 [ 1128.615887] loop4: rw=1, want=226, limit=16 [ 1128.619820] ? lock_downgrade+0x720/0x720 [ 1128.619833] ? aio_read+0x420/0x420 [ 1128.619850] ? __might_fault+0x11f/0x1d0 [ 1128.624864] attempt to access beyond end of device [ 1128.628812] __se_sys_io_submit+0x11b/0x4a0 [ 1128.628831] ? io_submit_one+0x20c0/0x20c0 [ 1128.633433] loop4: rw=1, want=249, limit=16 [ 1128.638061] ? retint_kernel+0x2d/0x2d [ 1128.638084] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1128.642485] attempt to access beyond end of device [ 1128.646336] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1128.646357] ? do_syscall_64+0x21/0x620 [ 1128.650357] loop4: rw=1, want=250, limit=16 [ 1128.655219] do_syscall_64+0xf9/0x620 [ 1128.655241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1128.660218] attempt to access beyond end of device [ 1128.664878] RIP: 0033:0x7fd330b44209 [ 1128.664892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1128.664899] RSP: 002b:00007fd32f4b9168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1128.664911] RAX: ffffffffffffffda RBX: 00007fd330c56f60 RCX: 00007fd330b44209 [ 1128.664918] RDX: 0000000020000540 RSI: 0000000000004011 RDI: 00007fd330c32000 [ 1128.664925] RBP: 00007fd32f4b91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1128.664933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.664942] R13: 00007ffc117096bf R14: 00007fd32f4b9300 R15: 0000000000022000 [ 1128.716756] loop2: rw=2049, want=18, limit=16 [ 1128.846018] loop4: rw=1, want=251, limit=16 [ 1128.852698] attempt to access beyond end of device [ 1128.873595] attempt to access beyond end of device [ 1128.893875] loop2: rw=2049, want=19, limit=16 [ 1128.907762] attempt to access beyond end of device [ 1128.913548] loop2: rw=2049, want=46, limit=16 [ 1128.919904] attempt to access beyond end of device [ 1128.933524] loop2: rw=2049, want=47, limit=16 [ 1128.943174] attempt to access beyond end of device [ 1128.951276] attempt to access beyond end of device [ 1128.956273] loop5: rw=1, want=256, limit=16 [ 1128.964324] loop4: rw=1, want=252, limit=16 [ 1128.973087] loop2: rw=2049, want=48, limit=16 [ 1128.985388] attempt to access beyond end of device [ 1128.992997] attempt to access beyond end of device [ 1129.003937] loop4: rw=1, want=254, limit=16 [ 1129.008468] loop2: rw=2049, want=49, limit=16 [ 1129.042919] attempt to access beyond end of device [ 1129.049452] attempt to access beyond end of device [ 1129.077277] loop4: rw=1, want=255, limit=16 [ 1129.078292] loop2: rw=2049, want=50, limit=16 [ 1129.088547] attempt to access beyond end of device [ 1129.091647] attempt to access beyond end of device [ 1129.104297] loop2: rw=2049, want=51, limit=16 [ 1129.110254] attempt to access beyond end of device [ 1129.115488] loop2: rw=2049, want=125, limit=16 [ 1129.122139] attempt to access beyond end of device [ 1129.125840] loop4: rw=1, want=256, limit=16 [ 1129.127157] loop2: rw=2049, want=126, limit=16 [ 1129.138140] attempt to access beyond end of device [ 1129.144052] attempt to access beyond end of device [ 1129.144517] loop2: rw=2049, want=127, limit=16 [ 1129.155886] loop4: rw=1, want=257, limit=16 [ 1129.162070] attempt to access beyond end of device [ 1129.168225] loop2: rw=2049, want=128, limit=16 [ 1129.171536] attempt to access beyond end of device [ 1129.174981] attempt to access beyond end of device [ 1129.185021] loop2: rw=2049, want=129, limit=16 [ 1129.191825] attempt to access beyond end of device [ 1129.193260] loop4: rw=1, want=258, limit=16 [ 1129.196847] loop2: rw=2049, want=130, limit=16 [ 1129.220882] attempt to access beyond end of device [ 1129.232677] loop2: rw=2049, want=131, limit=16 [ 1129.237447] attempt to access beyond end of device [ 1129.244114] loop2: rw=2049, want=132, limit=16 [ 1129.249686] attempt to access beyond end of device [ 1129.254746] loop2: rw=2049, want=138, limit=16 [ 1129.262091] attempt to access beyond end of device [ 1129.267357] loop2: rw=2049, want=169, limit=16 [ 1129.273609] attempt to access beyond end of device [ 1129.288873] loop2: rw=2049, want=170, limit=16 [ 1129.302753] attempt to access beyond end of device [ 1129.307804] loop2: rw=2049, want=171, limit=16 [ 1129.317560] attempt to access beyond end of device [ 1129.323822] loop2: rw=2049, want=172, limit=16 [ 1129.336217] attempt to access beyond end of device [ 1129.345511] loop2: rw=2049, want=202, limit=16 [ 1129.352582] attempt to access beyond end of device [ 1129.364945] loop2: rw=2049, want=203, limit=16 [ 1129.376595] attempt to access beyond end of device [ 1129.388825] loop2: rw=2049, want=211, limit=16 10:39:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1129.492916] attempt to access beyond end of device [ 1129.506634] attempt to access beyond end of device [ 1129.512076] loop2: rw=1, want=43, limit=16 [ 1129.512176] loop4: rw=2049, want=48, limit=16 [ 1129.523265] attempt to access beyond end of device [ 1129.528512] loop4: rw=2049, want=128, limit=16 [ 1129.533047] attempt to access beyond end of device [ 1129.534114] attempt to access beyond end of device [ 1129.543631] loop4: rw=2049, want=161, limit=16 [ 1129.547963] loop2: rw=1, want=44, limit=16 [ 1129.549205] attempt to access beyond end of device [ 1129.557601] loop4: rw=2049, want=162, limit=16 [ 1129.563316] attempt to access beyond end of device [ 1129.571806] loop4: rw=2049, want=163, limit=16 [ 1129.580140] attempt to access beyond end of device [ 1129.585305] loop4: rw=2049, want=190, limit=16 [ 1129.599237] attempt to access beyond end of device [ 1129.599251] loop2: rw=1, want=45, limit=16 [ 1129.599284] attempt to access beyond end of device [ 1129.599293] loop2: rw=1, want=52, limit=16 [ 1129.599323] attempt to access beyond end of device [ 1129.599332] loop2: rw=1, want=53, limit=16 [ 1129.599361] attempt to access beyond end of device [ 1129.599369] loop2: rw=1, want=54, limit=16 [ 1129.599400] attempt to access beyond end of device [ 1129.599409] loop2: rw=1, want=55, limit=16 [ 1129.599439] attempt to access beyond end of device [ 1129.599447] loop2: rw=1, want=56, limit=16 [ 1129.599476] attempt to access beyond end of device [ 1129.599485] loop2: rw=1, want=57, limit=16 [ 1129.599607] attempt to access beyond end of device [ 1129.599617] loop2: rw=1, want=121, limit=16 [ 1129.599691] attempt to access beyond end of device [ 1129.599700] loop2: rw=1, want=122, limit=16 [ 1129.603666] attempt to access beyond end of device [ 1129.603678] loop2: rw=1, want=123, limit=16 [ 1129.603713] attempt to access beyond end of device [ 1129.603722] loop2: rw=1, want=124, limit=16 [ 1129.603752] attempt to access beyond end of device [ 1129.603761] loop2: rw=1, want=133, limit=16 [ 1129.603791] attempt to access beyond end of device [ 1129.603801] loop2: rw=1, want=134, limit=16 [ 1129.603830] attempt to access beyond end of device [ 1129.603838] loop2: rw=1, want=135, limit=16 [ 1129.603873] attempt to access beyond end of device [ 1129.603882] loop2: rw=1, want=136, limit=16 [ 1129.603910] attempt to access beyond end of device [ 1129.603919] loop2: rw=1, want=137, limit=16 [ 1129.604041] attempt to access beyond end of device [ 1129.604050] loop2: rw=1, want=162, limit=16 [ 1129.604107] attempt to access beyond end of device [ 1129.604116] loop2: rw=1, want=163, limit=16 [ 1129.604146] attempt to access beyond end of device [ 1129.604154] loop2: rw=1, want=164, limit=16 [ 1129.604183] attempt to access beyond end of device [ 1129.608156] loop2: rw=1, want=165, limit=16 [ 1129.608194] attempt to access beyond end of device [ 1129.608203] loop2: rw=1, want=166, limit=16 [ 1129.608233] attempt to access beyond end of device [ 1129.608241] loop2: rw=1, want=167, limit=16 [ 1129.608271] attempt to access beyond end of device [ 1129.608280] loop2: rw=1, want=168, limit=16 [ 1129.608309] attempt to access beyond end of device [ 1129.608318] loop2: rw=1, want=173, limit=16 [ 1129.608348] attempt to access beyond end of device [ 1129.608357] loop2: rw=1, want=174, limit=16 [ 1129.608434] attempt to access beyond end of device [ 1129.608443] loop2: rw=1, want=198, limit=16 [ 1129.608498] attempt to access beyond end of device [ 1129.608507] loop2: rw=1, want=199, limit=16 [ 1129.608535] attempt to access beyond end of device [ 1129.608544] loop2: rw=1, want=200, limit=16 [ 1129.620217] attempt to access beyond end of device [ 1129.622777] attempt to access beyond end of device [ 1129.644108] loop2: rw=1, want=201, limit=16 [ 1129.647011] loop4: rw=2049, want=191, limit=16 [ 1129.715792] attempt to access beyond end of device [ 1129.715806] loop2: rw=1, want=212, limit=16 [ 1129.715835] attempt to access beyond end of device [ 1129.715845] loop2: rw=1, want=213, limit=16 [ 1129.715880] attempt to access beyond end of device [ 1129.715890] loop2: rw=1, want=214, limit=16 [ 1129.715918] attempt to access beyond end of device [ 1129.715927] loop2: rw=1, want=215, limit=16 [ 1129.715958] attempt to access beyond end of device [ 1129.715967] loop2: rw=1, want=216, limit=16 [ 1129.716067] attempt to access beyond end of device [ 1129.716077] loop2: rw=1, want=256, limit=16 [ 1129.890456] attempt to access beyond end of device [ 1129.898969] attempt to access beyond end of device [ 1129.899154] loop4: rw=2049, want=192, limit=16 [ 1129.900097] attempt to access beyond end of device [ 1129.900161] loop4: rw=2049, want=193, limit=16 [ 1129.901047] attempt to access beyond end of device [ 1129.901131] loop4: rw=2049, want=194, limit=16 [ 1129.902555] attempt to access beyond end of device [ 1129.902582] loop4: rw=2049, want=225, limit=16 [ 1129.903357] attempt to access beyond end of device [ 1129.903520] loop4: rw=2049, want=226, limit=16 [ 1129.904306] attempt to access beyond end of device [ 1129.904330] loop4: rw=2049, want=227, limit=16 [ 1129.905067] attempt to access beyond end of device [ 1129.905151] loop4: rw=2049, want=258, limit=16 [ 1129.905937] attempt to access beyond end of device [ 1129.906041] loop4: rw=2049, want=259, limit=16 [ 1129.907056] attempt to access beyond end of device [ 1129.907081] loop4: rw=2049, want=260, limit=16 [ 1129.907796] attempt to access beyond end of device [ 1129.907860] loop4: rw=2049, want=261, limit=16 10:39:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x5, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1130.202430] loop0: rw=2049, want=188, limit=16 [ 1130.227748] attempt to access beyond end of device [ 1130.236072] loop2: rw=2049, want=40, limit=16 [ 1130.251694] attempt to access beyond end of device [ 1130.261120] loop4: rw=1, want=120, limit=16 [ 1130.266707] attempt to access beyond end of device [ 1130.272597] attempt to access beyond end of device [ 1130.277664] loop2: rw=2049, want=73, limit=16 [ 1130.284463] loop4: rw=1, want=160, limit=16 [ 1130.289792] buffer_io_error: 188 callbacks suppressed [ 1130.289842] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 1130.306089] attempt to access beyond end of device 10:39:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x0, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1130.312486] loop4: rw=1, want=187, limit=16 [ 1130.317883] attempt to access beyond end of device [ 1130.330368] attempt to access beyond end of device [ 1130.335639] loop4: rw=1, want=188, limit=16 [ 1130.341682] loop2: rw=2049, want=74, limit=16 [ 1130.346385] Buffer I/O error on dev loop4, logical block 187, lost async page write [ 1130.359391] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 1130.419954] attempt to access beyond end of device [ 1130.432744] attempt to access beyond end of device [ 1130.496191] loop4: rw=1, want=189, limit=16 [ 1130.511461] loop2: rw=2049, want=75, limit=16 [ 1130.516206] Buffer I/O error on dev loop2, logical block 74, lost async page write [ 1130.526636] attempt to access beyond end of device [ 1130.570324] Buffer I/O error on dev loop4, logical block 188, lost async page write [ 1130.596743] loop2: rw=2049, want=76, limit=16 [ 1130.694297] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 1130.709056] attempt to access beyond end of device [ 1130.768073] loop4: rw=1, want=195, limit=16 [ 1130.782321] attempt to access beyond end of device [ 1130.810523] Buffer I/O error on dev loop4, logical block 194, lost async page write [ 1130.841270] loop2: rw=2049, want=77, limit=16 [ 1130.899014] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 1130.965898] attempt to access beyond end of device [ 1130.980199] loop3: rw=2049, want=188, limit=16 [ 1130.987184] attempt to access beyond end of device [ 1130.994751] attempt to access beyond end of device [ 1131.008349] loop2: rw=2049, want=78, limit=16 10:39:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4010, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1131.023181] loop4: rw=1, want=196, limit=16 [ 1131.031559] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 1131.048302] Buffer I/O error on dev loop4, logical block 195, lost async page write [ 1131.066041] attempt to access beyond end of device [ 1131.093973] attempt to access beyond end of device [ 1131.102385] loop2: rw=2049, want=79, limit=16 [ 1131.116115] loop4: rw=1, want=197, limit=16 [ 1131.125958] attempt to access beyond end of device [ 1131.163151] attempt to access beyond end of device [ 1131.168487] loop0: rw=2049, want=188, limit=16 [ 1131.175693] attempt to access beyond end of device [ 1131.180783] loop4: rw=1, want=198, limit=16 [ 1131.183297] loop2: rw=2049, want=96, limit=16 [ 1131.185178] attempt to access beyond end of device [ 1131.194662] loop4: rw=1, want=199, limit=16 [ 1131.199146] attempt to access beyond end of device [ 1131.204159] loop4: rw=1, want=200, limit=16 [ 1131.208692] attempt to access beyond end of device 10:39:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x0, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1131.213627] loop4: rw=1, want=224, limit=16 [ 1131.218050] attempt to access beyond end of device [ 1131.223630] loop4: rw=1, want=251, limit=16 [ 1131.233095] attempt to access beyond end of device [ 1131.239192] loop5: rw=1, want=168, limit=16 10:39:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1131.334671] attempt to access beyond end of device [ 1131.346520] loop2: rw=1, want=72, limit=16 [ 1131.386578] attempt to access beyond end of device [ 1131.413379] loop2: rw=1, want=95, limit=16 [ 1131.417931] attempt to access beyond end of device [ 1131.423295] loop2: rw=1, want=256, limit=16 [ 1131.597597] attempt to access beyond end of device [ 1131.603339] attempt to access beyond end of device 10:39:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x6, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1131.650066] loop3: rw=2049, want=188, limit=16 [ 1131.667282] loop4: rw=2049, want=25, limit=16 [ 1131.683573] attempt to access beyond end of device [ 1131.705288] attempt to access beyond end of device [ 1131.713904] loop5: rw=2049, want=25, limit=16 [ 1131.747044] loop4: rw=2049, want=26, limit=16 [ 1131.771856] attempt to access beyond end of device [ 1131.814178] attempt to access beyond end of device [ 1131.837335] loop5: rw=2049, want=26, limit=16 10:39:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4012, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1131.894727] attempt to access beyond end of device [ 1131.898087] loop4: rw=2049, want=27, limit=16 [ 1131.900448] loop0: rw=2049, want=188, limit=16 [ 1131.911337] attempt to access beyond end of device [ 1131.927421] attempt to access beyond end of device [ 1131.930985] attempt to access beyond end of device [ 1131.937519] loop2: rw=2049, want=87, limit=16 [ 1131.956073] loop5: rw=2049, want=27, limit=16 [ 1131.960869] attempt to access beyond end of device [ 1131.961173] loop5: rw=2049, want=92, limit=16 [ 1131.962150] attempt to access beyond end of device [ 1131.962273] loop5: rw=2049, want=93, limit=16 [ 1131.965902] attempt to access beyond end of device [ 1131.966163] loop5: rw=2049, want=94, limit=16 [ 1131.977949] loop4: rw=2049, want=28, limit=16 [ 1131.982476] attempt to access beyond end of device [ 1131.991616] attempt to access beyond end of device [ 1131.998119] loop5: rw=2049, want=95, limit=16 [ 1132.002083] loop2: rw=2049, want=88, limit=16 [ 1132.002766] attempt to access beyond end of device [ 1132.024419] attempt to access beyond end of device [ 1132.026508] loop2: rw=2049, want=89, limit=16 [ 1132.035897] attempt to access beyond end of device [ 1132.035964] loop4: rw=2049, want=29, limit=16 [ 1132.037125] attempt to access beyond end of device [ 1132.037252] loop4: rw=2049, want=54, limit=16 [ 1132.044126] attempt to access beyond end of device [ 1132.044392] loop4: rw=2049, want=55, limit=16 [ 1132.046197] attempt to access beyond end of device 10:39:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x0, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1132.046391] loop4: rw=2049, want=56, limit=16 [ 1132.051612] attempt to access beyond end of device [ 1132.051656] loop4: rw=2049, want=87, limit=16 [ 1132.053714] attempt to access beyond end of device [ 1132.053725] loop4: rw=2049, want=88, limit=16 [ 1132.055714] attempt to access beyond end of device [ 1132.055898] loop4: rw=2049, want=89, limit=16 [ 1132.057136] attempt to access beyond end of device [ 1132.057221] loop4: rw=2049, want=90, limit=16 [ 1132.063069] attempt to access beyond end of device [ 1132.063176] loop4: rw=2049, want=91, limit=16 [ 1132.066127] attempt to access beyond end of device [ 1132.066250] loop4: rw=2049, want=92, limit=16 [ 1132.070834] attempt to access beyond end of device [ 1132.070999] loop4: rw=2049, want=93, limit=16 [ 1132.073828] attempt to access beyond end of device [ 1132.074072] loop4: rw=2049, want=151, limit=16 [ 1132.079717] attempt to access beyond end of device [ 1132.079733] loop4: rw=2049, want=177, limit=16 [ 1132.082068] attempt to access beyond end of device [ 1132.082847] loop4: rw=2049, want=208, limit=16 [ 1132.085150] attempt to access beyond end of device [ 1132.085315] loop4: rw=2049, want=209, limit=16 [ 1132.101804] attempt to access beyond end of device [ 1132.104494] attempt to access beyond end of device [ 1132.114894] loop5: rw=2049, want=128, limit=16 [ 1132.119497] loop2: rw=2049, want=90, limit=16 [ 1132.120382] attempt to access beyond end of device [ 1132.120447] loop2: rw=2049, want=91, limit=16 [ 1132.121072] attempt to access beyond end of device [ 1132.182779] attempt to access beyond end of device [ 1132.184444] loop5: rw=2049, want=129, limit=16 [ 1132.189613] attempt to access beyond end of device [ 1132.194147] loop2: rw=2049, want=92, limit=16 [ 1132.209752] loop4: rw=2049, want=210, limit=16 [ 1132.213491] attempt to access beyond end of device [ 1132.245799] attempt to access beyond end of device [ 1132.248166] loop2: rw=2049, want=168, limit=16 [ 1132.302371] loop5: rw=2049, want=130, limit=16 [ 1132.309342] attempt to access beyond end of device [ 1132.457013] loop4: rw=2049, want=211, limit=16 [ 1132.457064] attempt to access beyond end of device [ 1132.457074] loop4: rw=2049, want=238, limit=16 [ 1132.457109] attempt to access beyond end of device [ 1132.457119] loop4: rw=2049, want=239, limit=16 [ 1132.457153] attempt to access beyond end of device [ 1132.457163] loop4: rw=2049, want=240, limit=16 [ 1132.511898] attempt to access beyond end of device [ 1132.514983] loop2: rw=2049, want=169, limit=16 [ 1132.529505] loop5: rw=2049, want=131, limit=16 [ 1132.544991] attempt to access beyond end of device 10:39:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1132.581150] loop5: rw=2049, want=135, limit=16 [ 1132.625709] attempt to access beyond end of device [ 1132.646421] loop4: rw=1, want=53, limit=16 10:39:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x3, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1132.678597] attempt to access beyond end of device [ 1132.683558] loop4: rw=1, want=80, limit=16 [ 1132.687861] attempt to access beyond end of device [ 1132.693198] attempt to access beyond end of device [ 1132.698139] loop5: rw=2049, want=161, limit=16 [ 1132.708533] attempt to access beyond end of device [ 1132.713492] loop2: rw=2049, want=170, limit=16 [ 1132.718122] attempt to access beyond end of device [ 1132.750921] loop4: rw=1, want=81, limit=16 [ 1132.766755] attempt to access beyond end of device [ 1132.775829] loop4: rw=1, want=82, limit=16 [ 1132.782154] attempt to access beyond end of device [ 1132.783959] attempt to access beyond end of device [ 1132.787575] loop4: rw=1, want=83, limit=16 [ 1132.798933] attempt to access beyond end of device 10:39:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1132.834692] loop5: rw=2049, want=211, limit=16 [ 1132.862932] loop4: rw=1, want=84, limit=16 [ 1132.869508] loop2: rw=2049, want=171, limit=16 [ 1132.886605] attempt to access beyond end of device [ 1132.903054] attempt to access beyond end of device [ 1132.912786] attempt to access beyond end of device [ 1132.915211] attempt to access beyond end of device [ 1132.930951] loop5: rw=2049, want=239, limit=16 [ 1132.944675] loop0: rw=2049, want=188, limit=16 [ 1132.952233] attempt to access beyond end of device [ 1132.955963] loop4: rw=1, want=85, limit=16 [ 1132.980050] loop2: rw=2049, want=256, limit=16 [ 1132.996680] loop5: rw=2049, want=240, limit=16 [ 1133.011852] attempt to access beyond end of device 10:39:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1133.027420] loop4: rw=1, want=86, limit=16 [ 1133.042328] attempt to access beyond end of device 10:39:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1133.073917] attempt to access beyond end of device [ 1133.082491] loop5: rw=1, want=91, limit=16 [ 1133.089658] attempt to access beyond end of device [ 1133.094604] loop2: rw=1, want=86, limit=16 [ 1133.108195] attempt to access beyond end of device [ 1133.114173] loop4: rw=1, want=94, limit=16 [ 1133.123730] attempt to access beyond end of device [ 1133.129574] loop5: rw=1, want=127, limit=16 [ 1133.136364] attempt to access beyond end of device [ 1133.183748] attempt to access beyond end of device [ 1133.197899] loop4: rw=1, want=95, limit=16 [ 1133.208340] attempt to access beyond end of device [ 1133.217580] loop2: rw=1, want=164, limit=16 [ 1133.228832] loop3: rw=2049, want=188, limit=16 [ 1133.246971] attempt to access beyond end of device [ 1133.254399] loop5: rw=1, want=132, limit=16 [ 1133.264677] attempt to access beyond end of device [ 1133.272186] loop4: rw=1, want=143, limit=16 [ 1133.281777] attempt to access beyond end of device [ 1133.292427] loop4: rw=1, want=144, limit=16 10:39:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x4, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1133.302854] attempt to access beyond end of device [ 1133.304827] attempt to access beyond end of device [ 1133.311994] loop4: rw=1, want=145, limit=16 [ 1133.327812] loop2: rw=1, want=165, limit=16 [ 1133.330509] attempt to access beyond end of device [ 1133.340438] loop4: rw=1, want=146, limit=16 [ 1133.346542] loop5: rw=1, want=133, limit=16 [ 1133.355189] attempt to access beyond end of device [ 1133.357204] attempt to access beyond end of device [ 1133.401442] attempt to access beyond end of device [ 1133.423760] loop4: rw=1, want=147, limit=16 [ 1133.435382] loop2: rw=1, want=166, limit=16 [ 1133.462214] loop5: rw=1, want=134, limit=16 [ 1133.466706] attempt to access beyond end of device [ 1133.486741] attempt to access beyond end of device [ 1133.499807] attempt to access beyond end of device [ 1133.513635] loop4: rw=1, want=148, limit=16 [ 1133.520614] attempt to access beyond end of device [ 1133.525783] loop0: rw=2049, want=188, limit=16 [ 1133.533777] loop2: rw=1, want=167, limit=16 [ 1133.541649] attempt to access beyond end of device [ 1133.546653] loop2: rw=1, want=172, limit=16 [ 1133.551388] attempt to access beyond end of device [ 1133.556379] loop2: rw=1, want=173, limit=16 [ 1133.561137] attempt to access beyond end of device [ 1133.566126] loop2: rw=1, want=174, limit=16 [ 1133.570854] attempt to access beyond end of device [ 1133.576807] loop2: rw=1, want=175, limit=16 10:39:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1133.583310] attempt to access beyond end of device [ 1133.588296] loop2: rw=1, want=176, limit=16 [ 1133.593071] attempt to access beyond end of device [ 1133.598762] loop5: rw=1, want=136, limit=16 [ 1133.604311] attempt to access beyond end of device [ 1133.612989] loop2: rw=1, want=240, limit=16 [ 1133.618853] attempt to access beyond end of device [ 1133.624944] loop4: rw=1, want=149, limit=16 10:39:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1133.638267] loop5: rw=1, want=137, limit=16 [ 1133.643219] attempt to access beyond end of device [ 1133.674730] attempt to access beyond end of device [ 1133.683286] loop4: rw=1, want=150, limit=16 [ 1133.693466] attempt to access beyond end of device [ 1133.706742] loop5: rw=1, want=138, limit=16 [ 1133.721464] attempt to access beyond end of device [ 1133.727615] loop4: rw=1, want=152, limit=16 [ 1133.749219] loop5: rw=1, want=139, limit=16 [ 1133.756085] attempt to access beyond end of device [ 1133.833132] attempt to access beyond end of device [ 1133.848581] loop4: rw=1, want=176, limit=16 10:39:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xd, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1133.890039] attempt to access beyond end of device [ 1133.895088] loop4: rw=1, want=201, limit=16 [ 1133.906018] loop5: rw=1, want=140, limit=16 [ 1133.912198] attempt to access beyond end of device [ 1133.945697] attempt to access beyond end of device [ 1133.955409] loop4: rw=1, want=202, limit=16 [ 1133.987582] attempt to access beyond end of device [ 1133.997834] loop5: rw=1, want=156, limit=16 [ 1134.049978] attempt to access beyond end of device [ 1134.082275] loop4: rw=1, want=203, limit=16 [ 1134.139067] loop5: rw=1, want=157, limit=16 [ 1134.152057] attempt to access beyond end of device [ 1134.162302] attempt to access beyond end of device [ 1134.162432] attempt to access beyond end of device [ 1134.167515] loop2: rw=2049, want=188, limit=16 [ 1134.194098] attempt to access beyond end of device [ 1134.202574] loop5: rw=1, want=158, limit=16 [ 1134.207195] loop3: rw=2049, want=188, limit=16 [ 1134.212362] attempt to access beyond end of device [ 1134.222561] loop5: rw=1, want=159, limit=16 [ 1134.230306] attempt to access beyond end of device [ 1134.235957] loop5: rw=1, want=160, limit=16 [ 1134.241347] attempt to access beyond end of device [ 1134.246366] loop5: rw=1, want=162, limit=16 [ 1134.251768] attempt to access beyond end of device [ 1134.256789] loop5: rw=1, want=163, limit=16 [ 1134.262389] attempt to access beyond end of device [ 1134.267410] loop5: rw=1, want=164, limit=16 [ 1134.271315] loop4: rw=1, want=204, limit=16 [ 1134.276592] attempt to access beyond end of device [ 1134.281964] loop4: rw=1, want=205, limit=16 10:39:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xf, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1134.286424] attempt to access beyond end of device [ 1134.292836] loop4: rw=1, want=206, limit=16 [ 1134.305981] attempt to access beyond end of device [ 1134.311337] loop4: rw=1, want=207, limit=16 [ 1134.315998] attempt to access beyond end of device [ 1134.321740] loop4: rw=1, want=212, limit=16 [ 1134.326197] attempt to access beyond end of device [ 1134.331600] loop4: rw=1, want=213, limit=16 [ 1134.336345] attempt to access beyond end of device [ 1134.338658] attempt to access beyond end of device [ 1134.341970] loop4: rw=1, want=237, limit=16 [ 1134.351000] attempt to access beyond end of device [ 1134.356030] loop4: rw=1, want=256, limit=16 [ 1134.370963] attempt to access beyond end of device [ 1134.372079] loop5: rw=1, want=165, limit=16 [ 1134.380057] loop0: rw=2049, want=188, limit=16 [ 1134.393731] attempt to access beyond end of device [ 1134.399249] loop5: rw=1, want=205, limit=16 [ 1134.403770] attempt to access beyond end of device [ 1134.408925] loop5: rw=1, want=206, limit=16 [ 1134.435747] attempt to access beyond end of device [ 1134.445687] loop5: rw=1, want=207, limit=16 [ 1134.471494] attempt to access beyond end of device [ 1134.491475] loop5: rw=1, want=208, limit=16 [ 1134.523340] attempt to access beyond end of device [ 1134.536443] loop5: rw=1, want=209, limit=16 [ 1134.541725] attempt to access beyond end of device [ 1134.546719] loop5: rw=1, want=210, limit=16 [ 1134.574246] attempt to access beyond end of device [ 1134.702837] loop5: rw=1, want=212, limit=16 [ 1134.752694] attempt to access beyond end of device [ 1134.811161] loop5: rw=1, want=213, limit=16 [ 1134.836670] attempt to access beyond end of device [ 1134.841973] loop2: rw=2049, want=188, limit=16 [ 1134.842383] attempt to access beyond end of device [ 1134.852994] attempt to access beyond end of device [ 1134.858102] loop5: rw=1, want=214, limit=16 [ 1134.862943] attempt to access beyond end of device [ 1134.868405] loop5: rw=1, want=238, limit=16 [ 1134.873162] attempt to access beyond end of device [ 1134.878923] loop5: rw=1, want=258, limit=16 [ 1134.886913] loop4: rw=2049, want=45, limit=16 [ 1134.895266] attempt to access beyond end of device [ 1134.902248] loop4: rw=2049, want=46, limit=16 [ 1134.908199] attempt to access beyond end of device [ 1134.929754] loop4: rw=2049, want=47, limit=16 [ 1134.935566] attempt to access beyond end of device [ 1134.944770] loop4: rw=2049, want=76, limit=16 [ 1134.953285] attempt to access beyond end of device [ 1134.960837] loop4: rw=2049, want=77, limit=16 [ 1134.983381] attempt to access beyond end of device [ 1135.003142] loop4: rw=2049, want=78, limit=16 [ 1135.017732] attempt to access beyond end of device [ 1135.029950] loop4: rw=2049, want=79, limit=16 [ 1135.040239] attempt to access beyond end of device [ 1135.046606] loop4: rw=2049, want=112, limit=16 [ 1135.057299] attempt to access beyond end of device [ 1135.063638] loop4: rw=2049, want=145, limit=16 [ 1135.072791] attempt to access beyond end of device [ 1135.106265] loop4: rw=2049, want=146, limit=16 [ 1135.141862] attempt to access beyond end of device [ 1135.175991] loop4: rw=2049, want=147, limit=16 [ 1135.194105] attempt to access beyond end of device [ 1135.205394] loop5: rw=2049, want=72, limit=16 [ 1135.212144] attempt to access beyond end of device [ 1135.212164] attempt to access beyond end of device [ 1135.212228] loop4: rw=2049, want=156, limit=16 [ 1135.217147] loop5: rw=2049, want=97, limit=16 [ 1135.217521] attempt to access beyond end of device [ 1135.240456] attempt to access beyond end of device [ 1135.242975] loop5: rw=2049, want=98, limit=16 [ 1135.245663] loop4: rw=2049, want=160, limit=16 [ 1135.250856] attempt to access beyond end of device [ 1135.257688] attempt to access beyond end of device [ 1135.265863] loop5: rw=2049, want=99, limit=16 [ 1135.267805] loop4: rw=2049, want=193, limit=16 [ 1135.271884] attempt to access beyond end of device [ 1135.277741] attempt to access beyond end of device [ 1135.281850] loop5: rw=2049, want=100, limit=16 [ 1135.282595] attempt to access beyond end of device [ 1135.282671] loop5: rw=2049, want=101, limit=16 [ 1135.289680] loop4: rw=2049, want=194, limit=16 [ 1135.307530] buffer_io_error: 130 callbacks suppressed [ 1135.307558] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 1135.324844] Buffer I/O error on dev loop4, logical block 193, lost async page write [ 1135.326627] attempt to access beyond end of device [ 1135.326796] loop4: rw=2049, want=195, limit=16 [ 1135.327060] Buffer I/O error on dev loop4, logical block 194, lost async page write [ 1135.331296] attempt to access beyond end of device [ 1135.331545] loop4: rw=2049, want=225, limit=16 [ 1135.331985] Buffer I/O error on dev loop4, logical block 224, lost async page write [ 1135.333343] attempt to access beyond end of device [ 1135.333388] loop4: rw=2049, want=254, limit=16 [ 1135.333487] Buffer I/O error on dev loop4, logical block 253, lost async page write [ 1135.334243] attempt to access beyond end of device [ 1135.334346] loop4: rw=2049, want=255, limit=16 [ 1135.334426] Buffer I/O error on dev loop4, logical block 254, lost async page write [ 1135.335342] attempt to access beyond end of device [ 1135.335406] loop4: rw=2049, want=256, limit=16 [ 1135.335666] Buffer I/O error on dev loop4, logical block 255, lost async page write [ 1135.336540] attempt to access beyond end of device [ 1135.336556] loop4: rw=2049, want=257, limit=16 [ 1135.336658] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 1135.337900] attempt to access beyond end of device [ 1135.338026] loop4: rw=2049, want=258, limit=16 [ 1135.353426] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 1135.358139] attempt to access beyond end of device [ 1135.358153] loop4: rw=2049, want=260, limit=16 [ 1135.358168] Buffer I/O error on dev loop4, logical block 259, lost async page write [ 1135.360198] attempt to access beyond end of device [ 1135.360210] loop4: rw=2049, want=261, limit=16 [ 1135.557951] attempt to access beyond end of device [ 1135.564859] loop5: rw=2049, want=109, limit=16 [ 1135.571389] attempt to access beyond end of device [ 1135.576566] loop5: rw=2049, want=125, limit=16 [ 1135.583261] attempt to access beyond end of device [ 1135.588852] loop5: rw=2049, want=126, limit=16 [ 1135.593988] attempt to access beyond end of device [ 1135.603864] loop5: rw=2049, want=134, limit=16 10:39:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x5, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1135.612184] attempt to access beyond end of device [ 1135.620940] attempt to access beyond end of device [ 1135.625977] loop4: rw=1, want=40, limit=16 [ 1135.629485] loop5: rw=2049, want=135, limit=16 [ 1135.641420] attempt to access beyond end of device [ 1135.644742] attempt to access beyond end of device [ 1135.647139] loop5: rw=2049, want=136, limit=16 [ 1135.655634] loop4: rw=1, want=41, limit=16 [ 1135.679848] attempt to access beyond end of device [ 1135.681721] attempt to access beyond end of device [ 1135.718059] loop5: rw=2049, want=137, limit=16 [ 1135.806201] attempt to access beyond end of device [ 1135.812202] loop5: rw=2049, want=138, limit=16 [ 1135.816940] attempt to access beyond end of device [ 1135.823397] loop5: rw=2049, want=139, limit=16 [ 1135.828109] attempt to access beyond end of device [ 1135.834958] loop4: rw=1, want=42, limit=16 [ 1135.837210] loop5: rw=2049, want=148, limit=16 [ 1135.844785] attempt to access beyond end of device [ 1135.850746] loop5: rw=2049, want=162, limit=16 [ 1135.855501] attempt to access beyond end of device [ 1135.861981] loop5: rw=2049, want=166, limit=16 [ 1135.866757] attempt to access beyond end of device [ 1135.873039] loop5: rw=2049, want=207, limit=16 [ 1135.877924] attempt to access beyond end of device [ 1135.905482] loop4: rw=1, want=43, limit=16 10:39:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r4, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x10, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1135.988777] attempt to access beyond end of device [ 1135.993799] loop5: rw=1, want=96, limit=16 [ 1136.017489] attempt to access beyond end of device [ 1136.035475] attempt to access beyond end of device [ 1136.071059] loop4: rw=1, want=44, limit=16 [ 1136.094961] loop5: rw=1, want=102, limit=16 [ 1136.153153] attempt to access beyond end of device [ 1136.176471] attempt to access beyond end of device [ 1136.253098] loop4: rw=1, want=48, limit=16 [ 1136.286978] loop5: rw=1, want=103, limit=16 [ 1136.321007] attempt to access beyond end of device [ 1136.324294] attempt to access beyond end of device [ 1136.326133] loop3: rw=2049, want=188, limit=16 [ 1136.339162] attempt to access beyond end of device [ 1136.354233] loop4: rw=1, want=49, limit=16 [ 1136.356503] attempt to access beyond end of device [ 1136.359046] attempt to access beyond end of device [ 1136.359060] loop4: rw=1, want=50, limit=16 [ 1136.359091] attempt to access beyond end of device [ 1136.359101] loop4: rw=1, want=51, limit=16 [ 1136.359186] attempt to access beyond end of device [ 1136.359195] loop4: rw=1, want=75, limit=16 [ 1136.359286] attempt to access beyond end of device [ 1136.359296] loop4: rw=1, want=111, limit=16 [ 1136.359428] attempt to access beyond end of device [ 1136.359438] loop4: rw=1, want=144, limit=16 [ 1136.359509] attempt to access beyond end of device [ 1136.359519] loop4: rw=1, want=155, limit=16 [ 1136.359571] attempt to access beyond end of device [ 1136.373130] attempt to access beyond end of device [ 1136.374298] loop4: rw=1, want=157, limit=16 [ 1136.385557] loop0: rw=2049, want=188, limit=16 [ 1136.388478] attempt to access beyond end of device [ 1136.398621] loop5: rw=1, want=104, limit=16 [ 1136.402064] loop4: rw=1, want=158, limit=16 [ 1136.418325] loop2: rw=2049, want=188, limit=16 [ 1136.423926] attempt to access beyond end of device [ 1136.430005] attempt to access beyond end of device 10:39:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x6, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1136.441453] loop5: rw=1, want=105, limit=16 [ 1136.448678] loop4: rw=1, want=159, limit=16 [ 1136.450110] attempt to access beyond end of device [ 1136.450121] loop4: rw=1, want=161, limit=16 [ 1136.450153] attempt to access beyond end of device [ 1136.450161] loop4: rw=1, want=162, limit=16 [ 1136.450188] attempt to access beyond end of device [ 1136.450197] loop4: rw=1, want=163, limit=16 [ 1136.450223] attempt to access beyond end of device [ 1136.476101] attempt to access beyond end of device [ 1136.516091] loop4: rw=1, want=164, limit=16 10:39:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x0, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1136.520817] attempt to access beyond end of device [ 1136.525818] loop4: rw=1, want=165, limit=16 [ 1136.530456] attempt to access beyond end of device [ 1136.535470] loop4: rw=1, want=189, limit=16 [ 1136.539926] loop5: rw=1, want=106, limit=16 [ 1136.544369] attempt to access beyond end of device [ 1136.551051] attempt to access beyond end of device [ 1136.557335] loop5: rw=1, want=107, limit=16 [ 1136.563770] loop4: rw=1, want=190, limit=16 10:39:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1136.577491] attempt to access beyond end of device [ 1136.588130] loop4: rw=1, want=191, limit=16 [ 1136.592544] attempt to access beyond end of device [ 1136.597475] loop4: rw=1, want=192, limit=16 [ 1136.599115] attempt to access beyond end of device [ 1136.621991] attempt to access beyond end of device [ 1136.624899] loop5: rw=1, want=108, limit=16 [ 1136.626945] loop4: rw=1, want=196, limit=16 [ 1136.626992] attempt to access beyond end of device [ 1136.636031] attempt to access beyond end of device [ 1136.652726] loop5: rw=1, want=110, limit=16 [ 1136.656986] loop4: rw=1, want=197, limit=16 [ 1136.666460] attempt to access beyond end of device [ 1136.666579] attempt to access beyond end of device [ 1136.687201] loop5: rw=1, want=118, limit=16 [ 1136.703467] attempt to access beyond end of device [ 1136.710118] loop4: rw=1, want=198, limit=16 [ 1136.722503] attempt to access beyond end of device [ 1136.728783] loop5: rw=1, want=119, limit=16 [ 1136.746130] attempt to access beyond end of device [ 1136.751710] loop4: rw=1, want=199, limit=16 [ 1136.779210] attempt to access beyond end of device [ 1136.787815] loop5: rw=1, want=120, limit=16 [ 1136.819814] loop4: rw=1, want=200, limit=16 [ 1136.824633] attempt to access beyond end of device 10:39:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x16, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1136.869488] attempt to access beyond end of device [ 1136.876943] loop5: rw=1, want=121, limit=16 [ 1136.902124] attempt to access beyond end of device [ 1136.905885] attempt to access beyond end of device [ 1136.909468] loop4: rw=1, want=224, limit=16 [ 1136.947703] loop2: rw=2049, want=25, limit=16 [ 1136.951995] attempt to access beyond end of device [ 1136.987862] loop5: rw=1, want=122, limit=16 [ 1137.004446] attempt to access beyond end of device [ 1137.013740] loop4: rw=1, want=249, limit=16 [ 1137.032171] attempt to access beyond end of device [ 1137.072380] loop2: rw=2049, want=26, limit=16 [ 1137.089380] loop5: rw=1, want=123, limit=16 [ 1137.098928] attempt to access beyond end of device [ 1137.104118] loop3: rw=2049, want=188, limit=16 [ 1137.115424] attempt to access beyond end of device [ 1137.120766] loop2: rw=2049, want=27, limit=16 [ 1137.138143] attempt to access beyond end of device [ 1137.143104] loop5: rw=1, want=124, limit=16 [ 1137.147466] attempt to access beyond end of device [ 1137.153082] attempt to access beyond end of device [ 1137.158504] loop2: rw=2049, want=28, limit=16 10:39:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x7, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1137.219162] attempt to access beyond end of device [ 1137.224205] loop2: rw=2049, want=64, limit=16 [ 1137.235433] loop5: rw=1, want=140, limit=16 [ 1137.247757] attempt to access beyond end of device [ 1137.253350] attempt to access beyond end of device [ 1137.259314] loop5: rw=1, want=141, limit=16 [ 1137.263701] attempt to access beyond end of device [ 1137.277406] loop2: rw=2049, want=136, limit=16 [ 1137.284487] attempt to access beyond end of device [ 1137.289758] loop5: rw=1, want=142, limit=16 [ 1137.294304] loop2: rw=2049, want=206, limit=16 [ 1137.299382] attempt to access beyond end of device [ 1137.304948] attempt to access beyond end of device [ 1137.310154] loop5: rw=1, want=143, limit=16 [ 1137.314597] loop2: rw=2049, want=207, limit=16 [ 1137.326805] attempt to access beyond end of device [ 1137.359583] loop5: rw=1, want=144, limit=16 [ 1137.397439] attempt to access beyond end of device 10:39:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1137.434897] attempt to access beyond end of device [ 1137.436768] loop5: rw=1, want=145, limit=16 [ 1137.462947] attempt to access beyond end of device [ 1137.468278] loop2: rw=1, want=60, limit=16 [ 1137.476121] attempt to access beyond end of device [ 1137.498412] attempt to access beyond end of device [ 1137.504173] loop0: rw=2049, want=188, limit=16 [ 1137.507485] attempt to access beyond end of device [ 1137.513446] loop2: rw=1, want=61, limit=16 [ 1137.520132] attempt to access beyond end of device [ 1137.526610] loop2: rw=1, want=62, limit=16 [ 1137.532471] attempt to access beyond end of device [ 1137.539215] loop2: rw=1, want=63, limit=16 [ 1137.543550] attempt to access beyond end of device [ 1137.548586] loop2: rw=1, want=65, limit=16 [ 1137.551757] loop4: rw=2049, want=25, limit=16 [ 1137.553074] attempt to access beyond end of device [ 1137.562626] loop2: rw=1, want=66, limit=16 [ 1137.566950] attempt to access beyond end of device [ 1137.572078] loop2: rw=1, want=67, limit=16 [ 1137.578070] attempt to access beyond end of device [ 1137.579251] attempt to access beyond end of device [ 1137.583059] loop2: rw=1, want=68, limit=16 [ 1137.583096] attempt to access beyond end of device [ 1137.598683] loop2: rw=1, want=69, limit=16 [ 1137.603068] attempt to access beyond end of device [ 1137.608092] loop2: rw=1, want=133, limit=16 [ 1137.612491] attempt to access beyond end of device [ 1137.617487] loop2: rw=1, want=134, limit=16 [ 1137.621927] attempt to access beyond end of device [ 1137.624062] loop5: rw=1, want=146, limit=16 [ 1137.626850] loop2: rw=1, want=135, limit=16 [ 1137.626898] attempt to access beyond end of device [ 1137.626911] loop2: rw=1, want=137, limit=16 [ 1137.644946] attempt to access beyond end of device [ 1137.650012] loop2: rw=1, want=138, limit=16 [ 1137.654370] attempt to access beyond end of device [ 1137.668263] loop4: rw=2049, want=26, limit=16 [ 1137.673776] attempt to access beyond end of device [ 1137.722128] attempt to access beyond end of device [ 1137.727088] loop5: rw=1, want=147, limit=16 [ 1137.737949] loop2: rw=1, want=139, limit=16 [ 1137.742511] loop4: rw=2049, want=27, limit=16 [ 1137.747646] attempt to access beyond end of device [ 1137.753191] attempt to access beyond end of device [ 1137.758517] attempt to access beyond end of device [ 1137.763454] loop2: rw=1, want=140, limit=16 [ 1137.767812] attempt to access beyond end of device [ 1137.773001] loop5: rw=1, want=149, limit=16 [ 1137.779110] loop4: rw=2049, want=28, limit=16 [ 1137.784566] attempt to access beyond end of device [ 1137.789102] attempt to access beyond end of device [ 1137.789869] loop4: rw=2049, want=29, limit=16 [ 1137.799873] attempt to access beyond end of device [ 1137.804886] loop4: rw=2049, want=38, limit=16 [ 1137.810603] attempt to access beyond end of device [ 1137.815687] loop4: rw=2049, want=47, limit=16 [ 1137.821002] attempt to access beyond end of device [ 1137.826416] loop4: rw=2049, want=48, limit=16 [ 1137.832211] attempt to access beyond end of device [ 1137.837205] loop4: rw=2049, want=105, limit=16 [ 1137.841028] loop2: rw=1, want=141, limit=16 [ 1137.842699] attempt to access beyond end of device [ 1137.848543] loop5: rw=1, want=150, limit=16 [ 1137.854302] loop4: rw=2049, want=106, limit=16 [ 1137.856816] attempt to access beyond end of device [ 1137.866147] loop5: rw=1, want=158, limit=16 [ 1137.871437] attempt to access beyond end of device [ 1137.876589] attempt to access beyond end of device [ 1137.883611] loop5: rw=1, want=159, limit=16 [ 1137.888825] loop2: rw=1, want=142, limit=16 [ 1137.893464] attempt to access beyond end of device [ 1137.900175] attempt to access beyond end of device [ 1137.904693] attempt to access beyond end of device [ 1137.905291] loop5: rw=1, want=160, limit=16 [ 1137.911092] attempt to access beyond end of device [ 1137.916632] loop2: rw=1, want=198, limit=16 [ 1137.924854] attempt to access beyond end of device [ 1137.931015] attempt to access beyond end of device [ 1137.936271] loop3: rw=2049, want=188, limit=16 [ 1137.938197] loop4: rw=2049, want=107, limit=16 [ 1137.943906] loop2: rw=1, want=199, limit=16 [ 1137.946000] attempt to access beyond end of device [ 1137.952571] loop5: rw=1, want=161, limit=16 [ 1137.965311] attempt to access beyond end of device [ 1137.970671] loop4: rw=2049, want=136, limit=16 [ 1137.972236] attempt to access beyond end of device [ 1137.975676] attempt to access beyond end of device [ 1137.981702] loop2: rw=1, want=200, limit=16 [ 1137.990944] loop5: rw=1, want=163, limit=16 [ 1137.995491] attempt to access beyond end of device [ 1138.002023] attempt to access beyond end of device [ 1138.010810] loop4: rw=2049, want=137, limit=16 [ 1138.016207] attempt to access beyond end of device [ 1138.017337] loop2: rw=1, want=201, limit=16 [ 1138.021208] loop4: rw=2049, want=138, limit=16 [ 1138.021261] attempt to access beyond end of device [ 1138.021271] loop4: rw=2049, want=139, limit=16 [ 1138.021306] attempt to access beyond end of device [ 1138.021315] loop4: rw=2049, want=168, limit=16 [ 1138.021373] attempt to access beyond end of device [ 1138.021382] loop4: rw=2049, want=194, limit=16 [ 1138.021414] attempt to access beyond end of device [ 1138.033486] loop5: rw=1, want=164, limit=16 [ 1138.041414] loop4: rw=2049, want=222, limit=16 [ 1138.049778] attempt to access beyond end of device [ 1138.057307] attempt to access beyond end of device [ 1138.087513] attempt to access beyond end of device [ 1138.093177] loop4: rw=2049, want=223, limit=16 [ 1138.097810] attempt to access beyond end of device [ 1138.102055] loop2: rw=1, want=202, limit=16 [ 1138.102964] loop4: rw=2049, want=247, limit=16 [ 1138.111845] attempt to access beyond end of device [ 1138.116783] loop4: rw=2049, want=248, limit=16 [ 1138.121592] loop5: rw=1, want=165, limit=16 [ 1138.125961] attempt to access beyond end of device [ 1138.138701] attempt to access beyond end of device [ 1138.143168] loop5: rw=1, want=167, limit=16 [ 1138.150419] attempt to access beyond end of device [ 1138.153590] attempt to access beyond end of device [ 1138.161114] loop5: rw=1, want=168, limit=16 [ 1138.166129] attempt to access beyond end of device [ 1138.172767] loop5: rw=1, want=184, limit=16 [ 1138.177173] attempt to access beyond end of device [ 1138.177201] loop2: rw=1, want=203, limit=16 [ 1138.183868] loop5: rw=1, want=185, limit=16 [ 1138.190015] loop4: rw=2049, want=249, limit=16 [ 1138.199070] attempt to access beyond end of device [ 1138.203541] attempt to access beyond end of device [ 1138.204804] attempt to access beyond end of device [ 1138.213549] loop5: rw=1, want=186, limit=16 [ 1138.214189] loop2: rw=1, want=204, limit=16 [ 1138.221662] attempt to access beyond end of device [ 1138.223067] loop4: rw=2049, want=250, limit=16 [ 1138.227652] loop5: rw=1, want=187, limit=16 [ 1138.227692] attempt to access beyond end of device [ 1138.235850] attempt to access beyond end of device [ 1138.238845] loop5: rw=1, want=188, limit=16 [ 1138.242243] loop2: rw=1, want=205, limit=16 [ 1138.247589] attempt to access beyond end of device [ 1138.257485] attempt to access beyond end of device [ 1138.265752] loop4: rw=2049, want=251, limit=16 [ 1138.267760] loop5: rw=1, want=189, limit=16 [ 1138.277356] attempt to access beyond end of device [ 1138.282821] attempt to access beyond end of device [ 1138.283366] loop5: rw=1, want=190, limit=16 [ 1138.294433] attempt to access beyond end of device [ 1138.296835] loop2: rw=1, want=208, limit=16 [ 1138.302584] loop5: rw=1, want=191, limit=16 [ 1138.309077] attempt to access beyond end of device [ 1138.312772] attempt to access beyond end of device [ 1138.314039] loop5: rw=1, want=213, limit=16 10:39:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x0, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x17, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1138.321661] loop2: rw=1, want=256, limit=16 [ 1138.328220] attempt to access beyond end of device [ 1138.333156] loop5: rw=1, want=261, limit=16 [ 1138.358174] attempt to access beyond end of device [ 1138.363222] loop4: rw=1, want=37, limit=16 [ 1138.367543] attempt to access beyond end of device [ 1138.379464] loop4: rw=1, want=46, limit=16 [ 1138.383845] attempt to access beyond end of device [ 1138.389883] loop4: rw=1, want=104, limit=16 [ 1138.395907] attempt to access beyond end of device [ 1138.402299] loop4: rw=1, want=131, limit=16 [ 1138.412699] attempt to access beyond end of device [ 1138.417648] loop4: rw=1, want=132, limit=16 [ 1138.426789] attempt to access beyond end of device [ 1138.435858] loop4: rw=1, want=133, limit=16 [ 1138.443838] attempt to access beyond end of device [ 1138.456977] loop4: rw=1, want=134, limit=16 [ 1138.481952] attempt to access beyond end of device [ 1138.492404] loop4: rw=1, want=135, limit=16 [ 1138.496994] attempt to access beyond end of device [ 1138.502971] loop4: rw=1, want=140, limit=16 [ 1138.507387] attempt to access beyond end of device [ 1138.583523] loop4: rw=1, want=141, limit=16 [ 1138.627622] attempt to access beyond end of device [ 1138.695288] loop4: rw=1, want=142, limit=16 [ 1138.726578] attempt to access beyond end of device [ 1138.733220] attempt to access beyond end of device [ 1138.739468] loop5: rw=2049, want=48, limit=16 [ 1138.779633] loop4: rw=1, want=143, limit=16 [ 1138.839936] attempt to access beyond end of device [ 1138.848297] attempt to access beyond end of device [ 1138.853423] loop0: rw=2049, want=188, limit=16 [ 1138.856672] attempt to access beyond end of device [ 1138.866268] loop4: rw=1, want=167, limit=16 [ 1138.870860] attempt to access beyond end of device [ 1138.875984] loop4: rw=1, want=192, limit=16 [ 1138.880530] attempt to access beyond end of device [ 1138.885680] loop4: rw=1, want=193, limit=16 10:39:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x9, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xf0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x0, 0x2d3}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1138.890339] attempt to access beyond end of device [ 1138.895415] loop4: rw=1, want=195, limit=16 [ 1138.907214] loop2: rw=2049, want=32, limit=16 [ 1138.908624] attempt to access beyond end of device [ 1138.917369] attempt to access beyond end of device [ 1138.925233] loop5: rw=1, want=259, limit=16 [ 1138.928183] loop4: rw=1, want=196, limit=16 [ 1138.938135] attempt to access beyond end of device [ 1138.943282] loop4: rw=1, want=197, limit=16 [ 1138.947753] attempt to access beyond end of device [ 1138.953125] loop4: rw=1, want=198, limit=16 [ 1138.963144] attempt to access beyond end of device [ 1138.968909] loop4: rw=1, want=199, limit=16 [ 1138.973599] attempt to access beyond end of device [ 1138.998053] loop4: rw=1, want=200, limit=16 [ 1139.011785] attempt to access beyond end of device [ 1139.016855] loop4: rw=1, want=201, limit=16 [ 1139.025521] attempt to access beyond end of device [ 1139.035824] loop4: rw=1, want=217, limit=16 10:39:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1139.086017] attempt to access beyond end of device [ 1139.098955] attempt to access beyond end of device [ 1139.116679] loop2: rw=1, want=224, limit=16 [ 1139.123290] loop4: rw=1, want=218, limit=16 10:39:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xf, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1139.150658] attempt to access beyond end of device [ 1139.156000] attempt to access beyond end of device [ 1139.234957] loop2: rw=1, want=257, limit=16 [ 1139.240234] loop4: rw=1, want=219, limit=16 [ 1139.244693] attempt to access beyond end of device [ 1139.341878] loop4: rw=1, want=220, limit=16 [ 1139.407411] attempt to access beyond end of device [ 1139.456173] loop4: rw=1, want=221, limit=16 10:39:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x10, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1139.535975] attempt to access beyond end of device [ 1139.629458] loop4: rw=1, want=224, limit=16 [ 1139.726078] attempt to access beyond end of device [ 1139.792123] loop4: rw=1, want=225, limit=16 [ 1139.795929] attempt to access beyond end of device [ 1139.823651] attempt to access beyond end of device [ 1139.833582] loop2: rw=2049, want=72, limit=16 [ 1139.854079] loop4: rw=1, want=226, limit=16 10:39:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x300, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1139.889123] attempt to access beyond end of device [ 1139.894187] loop2: rw=2049, want=128, limit=16 [ 1139.926986] attempt to access beyond end of device [ 1139.947074] attempt to access beyond end of device [ 1139.954627] loop4: rw=1, want=227, limit=16 [ 1139.964091] attempt to access beyond end of device [ 1139.966303] loop2: rw=2049, want=201, limit=16 [ 1139.976989] attempt to access beyond end of device [ 1139.998899] loop0: rw=2049, want=152, limit=16 [ 1140.005350] loop4: rw=1, want=243, limit=16 [ 1140.026430] attempt to access beyond end of device [ 1140.044925] loop4: rw=1, want=244, limit=16 [ 1140.056299] attempt to access beyond end of device [ 1140.067167] loop4: rw=1, want=245, limit=16 [ 1140.078085] attempt to access beyond end of device [ 1140.100234] attempt to access beyond end of device [ 1140.105323] loop2: rw=1, want=64, limit=16 [ 1140.112257] loop4: rw=1, want=246, limit=16 [ 1140.123187] attempt to access beyond end of device [ 1140.133526] attempt to access beyond end of device [ 1140.143213] loop2: rw=1, want=120, limit=16 [ 1140.149878] loop4: rw=1, want=252, limit=16 [ 1140.156012] attempt to access beyond end of device [ 1140.165809] attempt to access beyond end of device [ 1140.193591] loop2: rw=1, want=192, limit=16 [ 1140.198921] loop4: rw=1, want=253, limit=16 [ 1140.207389] attempt to access beyond end of device [ 1140.215320] attempt to access beyond end of device [ 1140.225104] loop2: rw=1, want=193, limit=16 [ 1140.229704] attempt to access beyond end of device [ 1140.236487] loop2: rw=1, want=202, limit=16 [ 1140.240979] attempt to access beyond end of device [ 1140.246064] loop2: rw=1, want=203, limit=16 [ 1140.250550] attempt to access beyond end of device [ 1140.255761] loop2: rw=1, want=204, limit=16 [ 1140.256714] loop4: rw=1, want=254, limit=16 [ 1140.264249] attempt to access beyond end of device [ 1140.269624] loop2: rw=1, want=205, limit=16 [ 1140.274011] attempt to access beyond end of device [ 1140.274060] attempt to access beyond end of device [ 1140.279023] loop2: rw=1, want=206, limit=16 [ 1140.279060] attempt to access beyond end of device [ 1140.293552] loop2: rw=1, want=207, limit=16 [ 1140.298002] attempt to access beyond end of device [ 1140.303462] loop2: rw=1, want=208, limit=16 [ 1140.306806] loop4: rw=1, want=255, limit=16 [ 1140.314653] buffer_io_error: 169 callbacks suppressed [ 1140.314662] Buffer I/O error on dev loop4, logical block 254, lost async page write [ 1140.315391] Buffer I/O error on dev loop2, logical block 207, lost async page write [ 1140.335689] attempt to access beyond end of device [ 1140.335969] attempt to access beyond end of device [ 1140.347077] loop2: rw=1, want=256, limit=16 [ 1140.353935] loop4: rw=1, want=256, limit=16 [ 1140.361802] Buffer I/O error on dev loop4, logical block 255, lost async page write [ 1140.370713] attempt to access beyond end of device [ 1140.376088] loop3: rw=1, want=185, limit=16 [ 1140.575035] attempt to access beyond end of device [ 1140.581689] loop4: rw=2049, want=32, limit=16 10:39:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x500, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xf0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1140.678732] attempt to access beyond end of device [ 1140.683782] loop4: rw=1, want=256, limit=16 10:39:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x600, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x383, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1141.187410] attempt to access beyond end of device [ 1141.201299] attempt to access beyond end of device [ 1141.280969] loop0: rw=2049, want=188, limit=16 [ 1141.317941] loop2: rw=2049, want=120, limit=16 [ 1141.323292] attempt to access beyond end of device [ 1141.409519] loop2: rw=2049, want=185, limit=16 10:39:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x385, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1141.429721] Buffer I/O error on dev loop2, logical block 184, lost async page write [ 1141.460973] attempt to access beyond end of device [ 1141.462902] attempt to access beyond end of device [ 1141.480531] loop4: rw=1, want=256, limit=16 [ 1141.497323] loop2: rw=2049, want=186, limit=16 [ 1141.502523] Buffer I/O error on dev loop2, logical block 185, lost async page write [ 1141.511317] attempt to access beyond end of device [ 1141.516301] loop2: rw=2049, want=251, limit=16 [ 1141.522764] Buffer I/O error on dev loop2, logical block 250, lost async page write [ 1141.531477] attempt to access beyond end of device 10:39:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x700, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1141.536484] loop2: rw=2049, want=252, limit=16 [ 1141.541385] Buffer I/O error on dev loop2, logical block 251, lost async page write [ 1141.549325] attempt to access beyond end of device [ 1141.554489] loop2: rw=2049, want=253, limit=16 [ 1141.559211] Buffer I/O error on dev loop2, logical block 252, lost async page write [ 1141.568830] attempt to access beyond end of device [ 1141.573809] loop2: rw=2049, want=254, limit=16 [ 1141.578708] Buffer I/O error on dev loop2, logical block 253, lost async page write [ 1141.586561] attempt to access beyond end of device [ 1141.591588] loop2: rw=2049, want=255, limit=16 [ 1141.596375] Buffer I/O error on dev loop2, logical block 254, lost async page write [ 1141.604331] attempt to access beyond end of device [ 1141.609664] loop2: rw=2049, want=256, limit=16 10:39:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1141.710604] attempt to access beyond end of device [ 1141.715569] loop2: rw=1, want=112, limit=16 [ 1141.741503] attempt to access beyond end of device [ 1141.790073] loop2: rw=1, want=184, limit=16 [ 1141.823706] attempt to access beyond end of device [ 1141.828751] loop2: rw=1, want=250, limit=16 10:39:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x900, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x3a0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1142.000286] attempt to access beyond end of device [ 1142.005863] loop4: rw=2049, want=240, limit=16 10:39:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1142.120532] attempt to access beyond end of device [ 1142.125493] loop4: rw=1, want=232, limit=16 [ 1142.127096] attempt to access beyond end of device [ 1142.191561] attempt to access beyond end of device [ 1142.195146] loop0: rw=2049, want=188, limit=16 10:39:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xa00, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1142.255561] loop4: rw=1, want=257, limit=16 [ 1142.272529] attempt to access beyond end of device 10:39:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1142.342226] loop2: rw=2049, want=17, limit=16 [ 1142.396775] attempt to access beyond end of device [ 1142.431077] loop2: rw=2049, want=18, limit=16 10:39:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x3a1, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1142.467775] attempt to access beyond end of device [ 1142.583910] loop2: rw=2049, want=19, limit=16 [ 1142.659081] attempt to access beyond end of device [ 1142.740002] loop2: rw=2049, want=20, limit=16 [ 1142.746024] attempt to access beyond end of device [ 1142.764098] attempt to access beyond end of device [ 1142.769863] loop4: rw=2049, want=56, limit=16 [ 1142.786646] attempt to access beyond end of device [ 1142.793587] loop2: rw=2049, want=21, limit=16 [ 1142.844289] attempt to access beyond end of device [ 1142.849730] loop2: rw=2049, want=22, limit=16 [ 1142.855827] attempt to access beyond end of device [ 1142.861968] loop2: rw=2049, want=23, limit=16 [ 1142.869191] loop4: rw=2049, want=57, limit=16 [ 1142.885978] attempt to access beyond end of device [ 1142.903069] attempt to access beyond end of device [ 1142.914274] loop2: rw=2049, want=50, limit=16 [ 1142.920298] loop4: rw=2049, want=58, limit=16 [ 1142.932594] attempt to access beyond end of device [ 1142.938479] loop2: rw=2049, want=97, limit=16 [ 1142.943666] attempt to access beyond end of device 10:39:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xb00, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:42 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x269b, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1142.960853] attempt to access beyond end of device [ 1142.968774] loop4: rw=2049, want=59, limit=16 [ 1142.973453] loop2: rw=2049, want=98, limit=16 [ 1142.993748] attempt to access beyond end of device [ 1142.999770] attempt to access beyond end of device [ 1143.004921] loop4: rw=2049, want=60, limit=16 [ 1143.013959] loop2: rw=2049, want=99, limit=16 [ 1143.022986] attempt to access beyond end of device [ 1143.037794] attempt to access beyond end of device [ 1143.046209] loop4: rw=2049, want=139, limit=16 [ 1143.051975] attempt to access beyond end of device [ 1143.057250] loop0: rw=2049, want=188, limit=16 [ 1143.059930] loop2: rw=2049, want=100, limit=16 [ 1143.081624] attempt to access beyond end of device [ 1143.086905] loop4: rw=2049, want=140, limit=16 [ 1143.092737] attempt to access beyond end of device [ 1143.098186] attempt to access beyond end of device [ 1143.105831] loop4: rw=2049, want=141, limit=16 [ 1143.111061] loop2: rw=2049, want=133, limit=16 [ 1143.119542] attempt to access beyond end of device [ 1143.124799] attempt to access beyond end of device [ 1143.129983] loop4: rw=2049, want=142, limit=16 [ 1143.134919] loop2: rw=2049, want=137, limit=16 [ 1143.140653] attempt to access beyond end of device [ 1143.145885] attempt to access beyond end of device [ 1143.151079] loop4: rw=2049, want=169, limit=16 [ 1143.156082] loop2: rw=2049, want=138, limit=16 10:39:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1143.166496] attempt to access beyond end of device [ 1143.183621] attempt to access beyond end of device [ 1143.199138] loop4: rw=2049, want=185, limit=16 [ 1143.214720] loop2: rw=2049, want=154, limit=16 [ 1143.232501] attempt to access beyond end of device [ 1143.245098] loop4: rw=2049, want=195, limit=16 [ 1143.252338] attempt to access beyond end of device [ 1143.257428] loop4: rw=2049, want=196, limit=16 [ 1143.266761] attempt to access beyond end of device 10:39:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xc00, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1143.294187] loop4: rw=2049, want=197, limit=16 10:39:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1143.315151] attempt to access beyond end of device [ 1143.330931] loop4: rw=2049, want=198, limit=16 [ 1143.335984] attempt to access beyond end of device [ 1143.344441] loop2: rw=1, want=47, limit=16 [ 1143.352847] attempt to access beyond end of device 10:39:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x26a2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1143.361195] attempt to access beyond end of device [ 1143.366270] loop4: rw=2049, want=199, limit=16 [ 1143.392366] loop2: rw=1, want=48, limit=16 [ 1143.400375] attempt to access beyond end of device [ 1143.416342] attempt to access beyond end of device [ 1143.438381] loop2: rw=1, want=49, limit=16 [ 1143.443117] attempt to access beyond end of device [ 1143.450656] loop2: rw=1, want=51, limit=16 [ 1143.470882] loop4: rw=2049, want=200, limit=16 [ 1143.498586] attempt to access beyond end of device [ 1143.505995] loop2: rw=1, want=52, limit=16 [ 1143.513330] attempt to access beyond end of device [ 1143.520340] loop2: rw=1, want=53, limit=16 [ 1143.524637] attempt to access beyond end of device [ 1143.524769] attempt to access beyond end of device [ 1143.536543] loop2: rw=1, want=54, limit=16 [ 1143.542961] attempt to access beyond end of device [ 1143.587618] loop4: rw=2049, want=225, limit=16 [ 1143.659031] loop2: rw=1, want=55, limit=16 [ 1143.685206] attempt to access beyond end of device [ 1143.692892] attempt to access beyond end of device 10:39:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xff0f, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1143.748523] loop4: rw=2049, want=244, limit=16 [ 1143.762078] loop2: rw=1, want=56, limit=16 [ 1143.786669] attempt to access beyond end of device [ 1143.810879] attempt to access beyond end of device [ 1143.813580] loop4: rw=2049, want=247, limit=16 [ 1143.822387] attempt to access beyond end of device [ 1143.843545] attempt to access beyond end of device [ 1143.845919] loop2: rw=1, want=96, limit=16 [ 1143.849875] loop0: rw=2049, want=188, limit=16 [ 1143.862453] loop4: rw=2049, want=248, limit=16 [ 1143.869549] attempt to access beyond end of device [ 1143.876909] attempt to access beyond end of device [ 1143.893830] loop2: rw=1, want=132, limit=16 [ 1143.904133] loop4: rw=2049, want=249, limit=16 [ 1143.909412] attempt to access beyond end of device [ 1143.914467] loop4: rw=2049, want=250, limit=16 [ 1143.916985] attempt to access beyond end of device [ 1143.930727] attempt to access beyond end of device [ 1143.949438] loop2: rw=1, want=134, limit=16 [ 1143.954715] loop4: rw=2049, want=251, limit=16 [ 1143.967683] attempt to access beyond end of device [ 1143.973041] attempt to access beyond end of device [ 1143.979897] loop4: rw=2049, want=256, limit=16 [ 1143.985267] loop2: rw=1, want=135, limit=16 [ 1143.990966] attempt to access beyond end of device [ 1144.002541] loop2: rw=1, want=136, limit=16 [ 1144.006998] attempt to access beyond end of device 10:39:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xfff0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xd00, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1144.045310] loop2: rw=1, want=139, limit=16 [ 1144.052032] attempt to access beyond end of device [ 1144.055680] attempt to access beyond end of device [ 1144.060868] loop4: rw=1, want=132, limit=16 [ 1144.071033] attempt to access beyond end of device [ 1144.094663] loop2: rw=1, want=140, limit=16 [ 1144.094726] loop4: rw=1, want=133, limit=16 [ 1144.117688] attempt to access beyond end of device [ 1144.124248] attempt to access beyond end of device 10:39:43 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1144.144876] loop2: rw=1, want=141, limit=16 [ 1144.161980] loop4: rw=1, want=134, limit=16 [ 1144.190617] attempt to access beyond end of device [ 1144.199382] attempt to access beyond end of device [ 1144.253590] loop4: rw=1, want=135, limit=16 10:39:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x7fffff, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1144.286525] loop2: rw=1, want=142, limit=16 [ 1144.289440] attempt to access beyond end of device [ 1144.304077] loop4: rw=1, want=136, limit=16 [ 1144.324556] attempt to access beyond end of device [ 1144.351401] attempt to access beyond end of device [ 1144.366973] loop4: rw=1, want=137, limit=16 [ 1144.374262] loop2: rw=1, want=143, limit=16 [ 1144.391620] attempt to access beyond end of device 10:39:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xe00, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1144.405124] attempt to access beyond end of device [ 1144.454481] loop4: rw=1, want=138, limit=16 [ 1144.471171] loop2: rw=1, want=151, limit=16 [ 1144.489466] attempt to access beyond end of device [ 1144.500642] attempt to access beyond end of device [ 1144.520766] attempt to access beyond end of device [ 1144.525865] loop4: rw=1, want=143, limit=16 [ 1144.525912] loop0: rw=2049, want=188, limit=16 [ 1144.536527] loop2: rw=1, want=152, limit=16 [ 1144.536578] attempt to access beyond end of device [ 1144.536588] loop2: rw=1, want=153, limit=16 [ 1144.536617] attempt to access beyond end of device [ 1144.536626] loop2: rw=1, want=155, limit=16 [ 1144.536657] attempt to access beyond end of device [ 1144.536666] loop2: rw=1, want=156, limit=16 [ 1144.536695] attempt to access beyond end of device [ 1144.536704] loop2: rw=1, want=157, limit=16 [ 1144.536736] attempt to access beyond end of device 10:39:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xfffffff, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1144.536745] loop2: rw=1, want=158, limit=16 [ 1144.536792] attempt to access beyond end of device [ 1144.536801] loop2: rw=1, want=159, limit=16 [ 1144.536830] attempt to access beyond end of device [ 1144.536839] loop2: rw=1, want=160, limit=16 [ 1144.536915] attempt to access beyond end of device [ 1144.536924] loop2: rw=1, want=176, limit=16 [ 1144.536978] attempt to access beyond end of device [ 1144.536987] loop2: rw=1, want=177, limit=16 [ 1144.537015] attempt to access beyond end of device [ 1144.537024] loop2: rw=1, want=178, limit=16 [ 1144.537052] attempt to access beyond end of device [ 1144.537061] loop2: rw=1, want=179, limit=16 [ 1144.537090] attempt to access beyond end of device [ 1144.537098] loop2: rw=1, want=181, limit=16 [ 1144.537126] attempt to access beyond end of device [ 1144.537135] loop2: rw=1, want=182, limit=16 [ 1144.537163] attempt to access beyond end of device [ 1144.537172] loop2: rw=1, want=183, limit=16 [ 1144.537200] attempt to access beyond end of device [ 1144.537209] loop2: rw=1, want=184, limit=16 [ 1144.537238] attempt to access beyond end of device [ 1144.537246] loop2: rw=1, want=185, limit=16 [ 1144.537341] attempt to access beyond end of device [ 1144.537351] loop2: rw=1, want=233, limit=16 [ 1144.556417] attempt to access beyond end of device [ 1144.556433] loop2: rw=1, want=234, limit=16 [ 1144.556465] attempt to access beyond end of device [ 1144.556475] loop2: rw=1, want=235, limit=16 [ 1144.556505] attempt to access beyond end of device [ 1144.556514] loop2: rw=1, want=236, limit=16 [ 1144.556543] attempt to access beyond end of device [ 1144.556552] loop2: rw=1, want=237, limit=16 [ 1144.556580] attempt to access beyond end of device [ 1144.556589] loop2: rw=1, want=239, limit=16 [ 1144.556617] attempt to access beyond end of device [ 1144.556627] loop2: rw=1, want=240, limit=16 [ 1144.556656] attempt to access beyond end of device [ 1144.556664] loop2: rw=1, want=241, limit=16 [ 1144.556693] attempt to access beyond end of device [ 1144.556702] loop2: rw=1, want=242, limit=16 [ 1144.556799] attempt to access beyond end of device [ 1144.556808] loop2: rw=1, want=258, limit=16 [ 1144.567309] attempt to access beyond end of device [ 1144.824251] loop4: rw=1, want=144, limit=16 [ 1144.828871] attempt to access beyond end of device [ 1144.833809] loop4: rw=1, want=168, limit=16 [ 1144.844617] attempt to access beyond end of device [ 1144.854609] loop4: rw=1, want=177, limit=16 10:39:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1144.864601] attempt to access beyond end of device [ 1144.873450] loop4: rw=1, want=178, limit=16 [ 1144.878770] attempt to access beyond end of device [ 1144.884067] loop4: rw=1, want=179, limit=16 [ 1144.890186] attempt to access beyond end of device [ 1144.895347] loop4: rw=1, want=180, limit=16 [ 1144.900842] attempt to access beyond end of device [ 1144.905839] loop4: rw=1, want=181, limit=16 [ 1144.911576] attempt to access beyond end of device [ 1144.922831] loop4: rw=1, want=182, limit=16 [ 1144.977187] attempt to access beyond end of device [ 1145.014554] loop4: rw=1, want=183, limit=16 [ 1145.054619] attempt to access beyond end of device [ 1145.081161] loop4: rw=1, want=184, limit=16 [ 1145.091016] attempt to access beyond end of device [ 1145.104434] attempt to access beyond end of device [ 1145.110940] loop4: rw=1, want=186, limit=16 [ 1145.115464] attempt to access beyond end of device [ 1145.121957] loop4: rw=1, want=194, limit=16 [ 1145.126480] attempt to access beyond end of device [ 1145.132693] loop2: rw=2049, want=40, limit=16 [ 1145.132850] loop4: rw=1, want=224, limit=16 [ 1145.143095] attempt to access beyond end of device [ 1145.148908] loop4: rw=1, want=241, limit=16 [ 1145.153657] attempt to access beyond end of device [ 1145.160465] loop4: rw=1, want=242, limit=16 [ 1145.166484] attempt to access beyond end of device [ 1145.180309] attempt to access beyond end of device [ 1145.185506] loop2: rw=2049, want=88, limit=16 [ 1145.206823] loop4: rw=1, want=243, limit=16 [ 1145.226036] attempt to access beyond end of device [ 1145.243842] attempt to access beyond end of device [ 1145.263232] loop2: rw=2049, want=137, limit=16 [ 1145.280620] loop4: rw=1, want=245, limit=16 [ 1145.305438] attempt to access beyond end of device [ 1145.319457] buffer_io_error: 99 callbacks suppressed [ 1145.319473] Buffer I/O error on dev loop4, logical block 244, lost async page write [ 1145.354000] loop2: rw=2049, want=182, limit=16 [ 1145.387252] Buffer I/O error on dev loop2, logical block 181, lost async page write [ 1145.418883] attempt to access beyond end of device [ 1145.446730] attempt to access beyond end of device [ 1145.480889] loop4: rw=1, want=246, limit=16 [ 1145.507599] loop2: rw=2049, want=183, limit=16 [ 1145.516975] Buffer I/O error on dev loop4, logical block 245, lost async page write [ 1145.517271] attempt to access beyond end of device [ 1145.532091] loop0: rw=2049, want=188, limit=16 [ 1145.540015] Buffer I/O error on dev loop2, logical block 182, lost async page write [ 1145.544108] attempt to access beyond end of device [ 1145.554753] loop4: rw=1, want=252, limit=16 [ 1145.560272] Buffer I/O error on dev loop4, logical block 251, lost async page write [ 1145.569048] attempt to access beyond end of device [ 1145.574073] loop4: rw=1, want=253, limit=16 [ 1145.574955] attempt to access beyond end of device [ 1145.580085] Buffer I/O error on dev loop4, logical block 252, lost async page write [ 1145.592570] attempt to access beyond end of device [ 1145.594927] loop2: rw=2049, want=184, limit=16 [ 1145.598876] loop4: rw=1, want=254, limit=16 [ 1145.608125] Buffer I/O error on dev loop4, logical block 253, lost async page write [ 1145.614191] Buffer I/O error on dev loop2, logical block 183, lost async page write [ 1145.616037] attempt to access beyond end of device [ 1145.637022] loop4: rw=1, want=255, limit=16 [ 1145.644679] Buffer I/O error on dev loop4, logical block 254, lost async page write [ 1145.657207] attempt to access beyond end of device [ 1145.672039] loop2: rw=2049, want=185, limit=16 [ 1145.676996] Buffer I/O error on dev loop2, logical block 184, lost async page write [ 1145.691823] attempt to access beyond end of device [ 1145.699592] loop2: rw=2049, want=186, limit=16 [ 1145.705120] attempt to access beyond end of device [ 1145.717166] loop2: rw=2049, want=187, limit=16 [ 1145.722677] attempt to access beyond end of device [ 1145.740909] loop2: rw=2049, want=188, limit=16 [ 1145.746551] attempt to access beyond end of device [ 1145.752623] loop2: rw=2049, want=190, limit=16 10:39:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xfffffff0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xf00, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, 0x0, 0x208e24b) [ 1145.846431] attempt to access beyond end of device [ 1145.876746] loop2: rw=1, want=80, limit=16 [ 1145.897520] attempt to access beyond end of device [ 1145.927818] loop2: rw=1, want=128, limit=16 [ 1145.938984] attempt to access beyond end of device [ 1145.944338] attempt to access beyond end of device [ 1145.960067] loop4: rw=2049, want=56, limit=16 [ 1145.964278] loop2: rw=1, want=129, limit=16 [ 1146.015284] attempt to access beyond end of device [ 1146.031823] attempt to access beyond end of device [ 1146.060169] loop2: rw=1, want=138, limit=16 [ 1146.086826] attempt to access beyond end of device [ 1146.090126] loop4: rw=2049, want=113, limit=16 [ 1146.122689] loop2: rw=1, want=139, limit=16 [ 1146.123163] attempt to access beyond end of device [ 1146.140891] attempt to access beyond end of device [ 1146.156392] loop2: rw=1, want=140, limit=16 [ 1146.166605] attempt to access beyond end of device [ 1146.192989] loop2: rw=1, want=141, limit=16 [ 1146.197190] loop4: rw=2049, want=145, limit=16 [ 1146.214508] attempt to access beyond end of device [ 1146.219375] attempt to access beyond end of device [ 1146.222858] loop2: rw=1, want=142, limit=16 [ 1146.233296] loop4: rw=2049, want=146, limit=16 [ 1146.241395] attempt to access beyond end of device [ 1146.246997] attempt to access beyond end of device [ 1146.273772] loop2: rw=1, want=143, limit=16 [ 1146.282827] loop4: rw=2049, want=147, limit=16 [ 1146.284251] attempt to access beyond end of device [ 1146.289332] attempt to access beyond end of device [ 1146.293027] loop0: rw=2049, want=188, limit=16 [ 1146.305242] attempt to access beyond end of device [ 1146.305771] loop2: rw=1, want=144, limit=16 [ 1146.314823] attempt to access beyond end of device [ 1146.316521] loop4: rw=2049, want=148, limit=16 [ 1146.319896] loop2: rw=1, want=176, limit=16 [ 1146.326516] attempt to access beyond end of device [ 1146.328941] attempt to access beyond end of device [ 1146.328953] loop2: rw=1, want=177, limit=16 [ 1146.328984] attempt to access beyond end of device [ 1146.328993] loop2: rw=1, want=178, limit=16 [ 1146.329022] attempt to access beyond end of device [ 1146.329030] loop2: rw=1, want=179, limit=16 [ 1146.329060] attempt to access beyond end of device [ 1146.329069] loop2: rw=1, want=180, limit=16 [ 1146.329098] attempt to access beyond end of device [ 1146.329106] loop2: rw=1, want=181, limit=16 [ 1146.329144] attempt to access beyond end of device [ 1146.329154] loop2: rw=1, want=189, limit=16 [ 1146.329183] attempt to access beyond end of device [ 1146.329192] loop2: rw=1, want=191, limit=16 [ 1146.329220] attempt to access beyond end of device [ 1146.329229] loop2: rw=1, want=192, limit=16 [ 1146.329346] attempt to access beyond end of device [ 1146.329354] loop2: rw=1, want=256, limit=16 [ 1146.433558] loop4: rw=2049, want=158, limit=16 [ 1146.449933] attempt to access beyond end of device [ 1146.455460] loop4: rw=2049, want=179, limit=16 [ 1146.461795] attempt to access beyond end of device [ 1146.467034] loop4: rw=2049, want=180, limit=16 [ 1146.472781] attempt to access beyond end of device [ 1146.478985] loop4: rw=2049, want=181, limit=16 [ 1146.505176] attempt to access beyond end of device [ 1146.510579] loop4: rw=2049, want=225, limit=16 [ 1146.515896] attempt to access beyond end of device [ 1146.521240] loop4: rw=2049, want=226, limit=16 [ 1146.526521] attempt to access beyond end of device [ 1146.531646] loop4: rw=2049, want=227, limit=16 [ 1146.536953] attempt to access beyond end of device [ 1146.542168] loop4: rw=2049, want=228, limit=16 [ 1146.547694] attempt to access beyond end of device [ 1146.552700] loop4: rw=2049, want=237, limit=16 [ 1146.558223] attempt to access beyond end of device [ 1146.563208] loop4: rw=2049, want=259, limit=16 [ 1146.569156] attempt to access beyond end of device [ 1146.574178] loop4: rw=2049, want=260, limit=16 [ 1146.579930] attempt to access beyond end of device [ 1146.599029] loop4: rw=2049, want=261, limit=16 10:39:46 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x0, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x1100, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, 0x0, 0x208e24b) 10:39:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x2, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1146.686565] attempt to access beyond end of device [ 1146.698792] loop4: rw=1, want=104, limit=16 [ 1146.714131] attempt to access beyond end of device [ 1146.726946] loop4: rw=1, want=105, limit=16 [ 1146.747877] attempt to access beyond end of device [ 1146.876992] loop4: rw=1, want=114, limit=16 [ 1146.934122] attempt to access beyond end of device 10:39:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x3, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1147.019912] loop4: rw=1, want=115, limit=16 [ 1147.031419] attempt to access beyond end of device [ 1147.040237] loop4: rw=1, want=116, limit=16 [ 1147.046170] attempt to access beyond end of device [ 1147.062893] loop4: rw=1, want=117, limit=16 [ 1147.077584] attempt to access beyond end of device [ 1147.096087] loop4: rw=1, want=118, limit=16 [ 1147.133277] attempt to access beyond end of device 10:39:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x0, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2000, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1147.180936] attempt to access beyond end of device [ 1147.185897] loop2: rw=1, want=256, limit=16 [ 1147.214741] loop4: rw=1, want=119, limit=16 [ 1147.266559] attempt to access beyond end of device 10:39:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x4, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1147.335385] loop4: rw=1, want=120, limit=16 [ 1147.380762] attempt to access beyond end of device [ 1147.386188] loop0: rw=2049, want=188, limit=16 [ 1147.388021] attempt to access beyond end of device [ 1147.406486] loop4: rw=1, want=144, limit=16 [ 1147.420900] attempt to access beyond end of device 10:39:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, r6, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r7, 0x0, 0x208e24b) [ 1147.428276] loop4: rw=1, want=156, limit=16 [ 1147.432798] attempt to access beyond end of device [ 1147.441924] loop4: rw=1, want=157, limit=16 [ 1147.505361] attempt to access beyond end of device [ 1147.533605] loop4: rw=1, want=159, limit=16 [ 1147.583324] attempt to access beyond end of device [ 1147.631589] loop4: rw=1, want=160, limit=16 [ 1147.670893] attempt to access beyond end of device 10:39:47 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1147.752109] loop4: rw=1, want=161, limit=16 [ 1147.766102] attempt to access beyond end of device [ 1147.771635] loop2: rw=2049, want=64, limit=16 [ 1147.777178] attempt to access beyond end of device [ 1147.782245] loop2: rw=2049, want=81, limit=16 [ 1147.787073] attempt to access beyond end of device [ 1147.790748] attempt to access beyond end of device [ 1147.792610] loop2: rw=2049, want=106, limit=16 [ 1147.802815] attempt to access beyond end of device [ 1147.808262] loop2: rw=2049, want=108, limit=16 10:39:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x5, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1147.855504] attempt to access beyond end of device [ 1147.855903] loop4: rw=1, want=162, limit=16 [ 1147.860737] loop2: rw=2049, want=109, limit=16 [ 1147.871054] attempt to access beyond end of device [ 1147.876066] loop2: rw=2049, want=110, limit=16 [ 1147.881441] attempt to access beyond end of device [ 1147.886525] loop2: rw=2049, want=111, limit=16 [ 1147.891680] attempt to access beyond end of device [ 1147.896693] loop2: rw=2049, want=112, limit=16 [ 1147.902322] attempt to access beyond end of device [ 1147.907703] loop2: rw=2049, want=113, limit=16 [ 1147.953400] attempt to access beyond end of device [ 1147.958563] loop4: rw=1, want=163, limit=16 [ 1147.962927] attempt to access beyond end of device [ 1147.968011] attempt to access beyond end of device [ 1147.973107] loop2: rw=2049, want=121, limit=16 [ 1147.979290] attempt to access beyond end of device [ 1147.984308] loop2: rw=2049, want=122, limit=16 [ 1147.989534] loop4: rw=1, want=164, limit=16 [ 1147.993893] attempt to access beyond end of device 10:39:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x4000, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1148.005722] attempt to access beyond end of device [ 1148.011565] loop4: rw=1, want=165, limit=16 [ 1148.015972] attempt to access beyond end of device [ 1148.022972] loop2: rw=2049, want=130, limit=16 [ 1148.069150] attempt to access beyond end of device [ 1148.074235] loop2: rw=2049, want=152, limit=16 [ 1148.082457] loop4: rw=1, want=173, limit=16 [ 1148.156021] attempt to access beyond end of device [ 1148.163666] attempt to access beyond end of device [ 1148.177686] loop4: rw=1, want=174, limit=16 [ 1148.183388] loop2: rw=2049, want=185, limit=16 [ 1148.201574] attempt to access beyond end of device [ 1148.224735] attempt to access beyond end of device [ 1148.225908] loop2: rw=2049, want=190, limit=16 [ 1148.243583] attempt to access beyond end of device [ 1148.267466] loop4: rw=1, want=175, limit=16 [ 1148.280173] loop2: rw=2049, want=191, limit=16 [ 1148.286143] attempt to access beyond end of device [ 1148.301881] attempt to access beyond end of device [ 1148.310636] loop4: rw=1, want=176, limit=16 [ 1148.327842] loop2: rw=2049, want=192, limit=16 [ 1148.342212] attempt to access beyond end of device [ 1148.358356] attempt to access beyond end of device [ 1148.370114] loop4: rw=1, want=177, limit=16 [ 1148.373320] attempt to access beyond end of device [ 1148.385885] loop2: rw=2049, want=193, limit=16 [ 1148.392687] attempt to access beyond end of device [ 1148.398216] loop4: rw=1, want=178, limit=16 [ 1148.402697] attempt to access beyond end of device [ 1148.408084] loop4: rw=1, want=182, limit=16 [ 1148.417014] attempt to access beyond end of device [ 1148.422005] loop0: rw=2049, want=188, limit=16 [ 1148.430464] attempt to access beyond end of device [ 1148.435880] loop4: rw=1, want=183, limit=16 [ 1148.441546] attempt to access beyond end of device [ 1148.446683] loop4: rw=1, want=184, limit=16 [ 1148.448497] loop2: rw=2049, want=201, limit=16 [ 1148.453294] attempt to access beyond end of device [ 1148.460251] attempt to access beyond end of device [ 1148.462306] loop4: rw=1, want=224, limit=16 [ 1148.471062] attempt to access beyond end of device [ 1148.475591] loop2: rw=2049, want=202, limit=16 [ 1148.476151] loop4: rw=1, want=236, limit=16 [ 1148.487501] attempt to access beyond end of device [ 1148.491946] attempt to access beyond end of device [ 1148.492679] loop4: rw=1, want=253, limit=16 [ 1148.512620] loop2: rw=2049, want=203, limit=16 [ 1148.518373] attempt to access beyond end of device [ 1148.539127] loop2: rw=2049, want=204, limit=16 [ 1148.550149] attempt to access beyond end of device [ 1148.568432] loop2: rw=2049, want=207, limit=16 [ 1148.582133] attempt to access beyond end of device [ 1148.592296] loop2: rw=2049, want=208, limit=16 [ 1148.604352] attempt to access beyond end of device [ 1148.610276] loop2: rw=2049, want=209, limit=16 [ 1148.615258] attempt to access beyond end of device [ 1148.622136] loop2: rw=2049, want=210, limit=16 [ 1148.639603] attempt to access beyond end of device [ 1148.679662] loop2: rw=2049, want=211, limit=16 [ 1148.744695] attempt to access beyond end of device [ 1148.750957] loop4: rw=2049, want=32, limit=16 [ 1148.756458] attempt to access beyond end of device [ 1148.763642] loop4: rw=2049, want=57, limit=16 [ 1148.771557] attempt to access beyond end of device [ 1148.776653] loop4: rw=2049, want=58, limit=16 [ 1148.794798] attempt to access beyond end of device [ 1148.795871] attempt to access beyond end of device [ 1148.801036] loop2: rw=1, want=80, limit=16 [ 1148.805159] loop4: rw=2049, want=90, limit=16 [ 1148.812200] attempt to access beyond end of device [ 1148.815330] attempt to access beyond end of device [ 1148.825013] loop4: rw=2049, want=92, limit=16 [ 1148.826225] loop2: rw=1, want=105, limit=16 [ 1148.835478] attempt to access beyond end of device [ 1148.837677] attempt to access beyond end of device [ 1148.849614] loop2: rw=1, want=107, limit=16 [ 1148.854519] loop4: rw=2049, want=120, limit=16 [ 1148.855593] attempt to access beyond end of device [ 1148.859823] attempt to access beyond end of device [ 1148.870698] loop4: rw=2049, want=129, limit=16 [ 1148.875892] attempt to access beyond end of device [ 1148.882234] loop2: rw=1, want=123, limit=16 [ 1148.883829] loop4: rw=2049, want=164, limit=16 [ 1148.898806] attempt to access beyond end of device [ 1148.902728] attempt to access beyond end of device [ 1148.904023] loop4: rw=2049, want=165, limit=16 [ 1148.915093] loop2: rw=1, want=124, limit=16 [ 1148.920738] attempt to access beyond end of device [ 1148.925779] loop2: rw=1, want=125, limit=16 [ 1148.930322] attempt to access beyond end of device [ 1148.935389] loop2: rw=1, want=126, limit=16 [ 1148.940535] attempt to access beyond end of device [ 1148.945658] loop2: rw=1, want=127, limit=16 [ 1148.950218] attempt to access beyond end of device [ 1148.955232] loop2: rw=1, want=128, limit=16 [ 1148.959793] attempt to access beyond end of device [ 1148.964824] loop2: rw=1, want=129, limit=16 [ 1148.969501] attempt to access beyond end of device [ 1148.974532] loop2: rw=1, want=146, limit=16 [ 1148.979202] attempt to access beyond end of device [ 1148.984289] loop2: rw=1, want=147, limit=16 [ 1148.989501] attempt to access beyond end of device [ 1148.994517] loop2: rw=1, want=148, limit=16 10:39:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x6, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x4100, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x0, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:48 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1149.000142] attempt to access beyond end of device [ 1149.005158] loop2: rw=1, want=149, limit=16 [ 1149.010667] attempt to access beyond end of device [ 1149.029719] attempt to access beyond end of device [ 1149.030639] loop2: rw=1, want=150, limit=16 [ 1149.034702] loop4: rw=1, want=56, limit=16 [ 1149.034808] attempt to access beyond end of device [ 1149.047222] attempt to access beyond end of device [ 1149.058916] loop2: rw=1, want=151, limit=16 [ 1149.073295] attempt to access beyond end of device [ 1149.085350] loop2: rw=1, want=153, limit=16 [ 1149.114017] attempt to access beyond end of device [ 1149.130762] loop4: rw=1, want=82, limit=16 [ 1149.147537] loop2: rw=1, want=154, limit=16 [ 1149.194213] attempt to access beyond end of device [ 1149.210395] attempt to access beyond end of device 10:39:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x7, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1149.245971] loop2: rw=1, want=155, limit=16 [ 1149.261414] attempt to access beyond end of device [ 1149.266599] loop0: rw=2049, want=40, limit=16 [ 1149.272811] loop4: rw=1, want=83, limit=16 [ 1149.279111] attempt to access beyond end of device [ 1149.284276] loop0: rw=2049, want=41, limit=16 [ 1149.289657] attempt to access beyond end of device [ 1149.294763] loop0: rw=2049, want=42, limit=16 [ 1149.300065] attempt to access beyond end of device [ 1149.305226] loop0: rw=2049, want=43, limit=16 [ 1149.310637] attempt to access beyond end of device [ 1149.315929] loop0: rw=2049, want=108, limit=16 [ 1149.321568] attempt to access beyond end of device [ 1149.326762] loop0: rw=2049, want=109, limit=16 [ 1149.327347] attempt to access beyond end of device [ 1149.332334] attempt to access beyond end of device [ 1149.348615] loop2: rw=1, want=179, limit=16 [ 1149.354332] attempt to access beyond end of device [ 1149.363288] loop2: rw=1, want=180, limit=16 [ 1149.373960] attempt to access beyond end of device [ 1149.381818] attempt to access beyond end of device [ 1149.395784] loop2: rw=1, want=181, limit=16 [ 1149.422420] loop0: rw=2049, want=110, limit=16 [ 1149.424291] loop4: rw=1, want=84, limit=16 [ 1149.432282] attempt to access beyond end of device [ 1149.439283] attempt to access beyond end of device [ 1149.451978] loop4: rw=1, want=85, limit=16 [ 1149.460371] attempt to access beyond end of device [ 1149.465916] loop4: rw=1, want=86, limit=16 10:39:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x8100, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1149.470768] attempt to access beyond end of device [ 1149.476082] loop4: rw=1, want=87, limit=16 [ 1149.481170] attempt to access beyond end of device [ 1149.486774] loop4: rw=1, want=88, limit=16 [ 1149.492150] attempt to access beyond end of device [ 1149.497591] loop4: rw=1, want=89, limit=16 [ 1149.502038] attempt to access beyond end of device [ 1149.511549] loop4: rw=1, want=91, limit=16 [ 1149.511552] attempt to access beyond end of device [ 1149.520516] attempt to access beyond end of device [ 1149.522745] loop2: rw=1, want=182, limit=16 [ 1149.530681] loop4: rw=1, want=116, limit=16 [ 1149.552106] attempt to access beyond end of device [ 1149.566006] attempt to access beyond end of device [ 1149.575384] loop0: rw=2049, want=111, limit=16 10:39:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x8, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1149.600542] loop4: rw=1, want=117, limit=16 [ 1149.604195] loop2: rw=1, want=183, limit=16 [ 1149.610753] attempt to access beyond end of device [ 1149.621395] loop4: rw=1, want=118, limit=16 [ 1149.625612] attempt to access beyond end of device [ 1149.635649] attempt to access beyond end of device [ 1149.646400] loop4: rw=1, want=119, limit=16 [ 1149.657352] attempt to access beyond end of device [ 1149.668132] attempt to access beyond end of device [ 1149.674341] loop4: rw=1, want=121, limit=16 [ 1149.682799] loop0: rw=2049, want=112, limit=16 [ 1149.684670] attempt to access beyond end of device [ 1149.710685] loop2: rw=1, want=184, limit=16 [ 1149.712214] attempt to access beyond end of device [ 1149.721624] loop4: rw=1, want=122, limit=16 [ 1149.732189] attempt to access beyond end of device [ 1149.741114] loop0: rw=2049, want=145, limit=16 [ 1149.746708] attempt to access beyond end of device [ 1149.750628] attempt to access beyond end of device [ 1149.756180] loop0: rw=2049, want=146, limit=16 [ 1149.765349] loop4: rw=1, want=123, limit=16 [ 1149.765396] attempt to access beyond end of device [ 1149.765406] loop4: rw=1, want=124, limit=16 [ 1149.765436] attempt to access beyond end of device [ 1149.765445] loop4: rw=1, want=125, limit=16 [ 1149.765501] attempt to access beyond end of device [ 1149.765510] loop4: rw=1, want=126, limit=16 [ 1149.765548] attempt to access beyond end of device [ 1149.765557] loop4: rw=1, want=127, limit=16 [ 1149.765586] attempt to access beyond end of device [ 1149.765595] loop4: rw=1, want=128, limit=16 [ 1149.765625] attempt to access beyond end of device [ 1149.765634] loop4: rw=1, want=130, limit=16 [ 1149.765663] attempt to access beyond end of device [ 1149.765671] loop4: rw=1, want=131, limit=16 [ 1149.765699] attempt to access beyond end of device [ 1149.765708] loop4: rw=1, want=132, limit=16 [ 1149.765737] attempt to access beyond end of device [ 1149.765746] loop4: rw=1, want=133, limit=16 [ 1149.765774] attempt to access beyond end of device [ 1149.765783] loop4: rw=1, want=134, limit=16 [ 1149.765877] attempt to access beyond end of device [ 1149.765886] loop4: rw=1, want=158, limit=16 [ 1149.765942] attempt to access beyond end of device [ 1149.765951] loop4: rw=1, want=159, limit=16 [ 1149.765984] attempt to access beyond end of device [ 1149.765993] loop4: rw=1, want=160, limit=16 [ 1149.766021] attempt to access beyond end of device [ 1149.766030] loop4: rw=1, want=161, limit=16 [ 1149.766058] attempt to access beyond end of device [ 1149.766067] loop4: rw=1, want=162, limit=16 [ 1149.766095] attempt to access beyond end of device [ 1149.766104] loop4: rw=1, want=163, limit=16 [ 1149.766133] attempt to access beyond end of device [ 1149.766142] loop4: rw=1, want=166, limit=16 [ 1149.766169] attempt to access beyond end of device [ 1149.766178] loop4: rw=1, want=167, limit=16 [ 1149.766207] attempt to access beyond end of device [ 1149.766216] loop4: rw=1, want=168, limit=16 [ 1149.778361] attempt to access beyond end of device [ 1149.778375] loop4: rw=1, want=256, limit=16 [ 1149.870640] loop2: rw=1, want=186, limit=16 [ 1149.870689] attempt to access beyond end of device [ 1149.870699] loop2: rw=1, want=187, limit=16 [ 1149.870729] attempt to access beyond end of device [ 1149.870738] loop2: rw=1, want=188, limit=16 [ 1149.870792] attempt to access beyond end of device [ 1149.870801] loop2: rw=1, want=189, limit=16 [ 1149.870830] attempt to access beyond end of device [ 1149.870839] loop2: rw=1, want=205, limit=16 [ 1149.870868] attempt to access beyond end of device [ 1149.870876] loop2: rw=1, want=206, limit=16 [ 1149.870906] attempt to access beyond end of device [ 1149.870915] loop2: rw=1, want=212, limit=16 [ 1149.870945] attempt to access beyond end of device [ 1149.870953] loop2: rw=1, want=213, limit=16 [ 1149.870982] attempt to access beyond end of device [ 1149.870991] loop2: rw=1, want=214, limit=16 [ 1149.871020] attempt to access beyond end of device [ 1149.871029] loop2: rw=1, want=215, limit=16 [ 1149.871056] attempt to access beyond end of device [ 1149.871065] loop2: rw=1, want=216, limit=16 [ 1149.871187] attempt to access beyond end of device [ 1149.871196] loop2: rw=1, want=256, limit=16 [ 1150.184448] attempt to access beyond end of device [ 1150.194975] loop0: rw=2049, want=179, limit=16 [ 1150.199794] attempt to access beyond end of device 10:39:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xf000, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1150.204818] loop0: rw=2049, want=180, limit=16 [ 1150.209524] attempt to access beyond end of device [ 1150.214500] loop0: rw=2049, want=181, limit=16 [ 1150.219188] attempt to access beyond end of device [ 1150.224116] loop0: rw=2049, want=182, limit=16 [ 1150.228823] attempt to access beyond end of device [ 1150.233757] loop0: rw=2049, want=183, limit=16 [ 1150.239463] attempt to access beyond end of device [ 1150.244403] loop0: rw=2049, want=184, limit=16 10:39:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:49 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1150.394088] attempt to access beyond end of device [ 1150.431594] loop0: rw=1, want=107, limit=16 [ 1150.452668] attempt to access beyond end of device [ 1150.471700] loop4: rw=2049, want=40, limit=16 [ 1150.477556] attempt to access beyond end of device [ 1150.477571] loop0: rw=1, want=144, limit=16 [ 1150.477704] attempt to access beyond end of device [ 1150.477714] loop0: rw=1, want=178, limit=16 [ 1150.477805] attempt to access beyond end of device [ 1150.477813] loop0: rw=1, want=216, limit=16 [ 1150.477910] attempt to access beyond end of device [ 1150.477919] loop0: rw=1, want=258, limit=16 [ 1150.588384] attempt to access beyond end of device [ 1150.593512] loop4: rw=2049, want=41, limit=16 [ 1150.659248] buffer_io_error: 172 callbacks suppressed [ 1150.659363] Buffer I/O error on dev loop4, logical block 40, lost async page write [ 1150.660996] attempt to access beyond end of device [ 1150.677376] attempt to access beyond end of device [ 1150.693153] loop2: rw=2049, want=48, limit=16 [ 1150.701006] loop4: rw=2049, want=42, limit=16 [ 1150.716650] Buffer I/O error on dev loop4, logical block 41, lost async page write [ 1150.758267] attempt to access beyond end of device [ 1150.779666] loop4: rw=2049, want=43, limit=16 [ 1150.794266] attempt to access beyond end of device [ 1150.799700] loop2: rw=1, want=256, limit=16 [ 1150.815350] Buffer I/O error on dev loop4, logical block 42, lost async page write [ 1150.843960] attempt to access beyond end of device [ 1150.848265] attempt to access beyond end of device [ 1150.855091] loop0: rw=2049, want=48, limit=16 [ 1150.860544] loop4: rw=2049, want=45, limit=16 [ 1150.861263] attempt to access beyond end of device [ 1150.872942] loop0: rw=2049, want=49, limit=16 [ 1150.874538] Buffer I/O error on dev loop4, logical block 44, lost async page write [ 1150.878565] Buffer I/O error on dev loop0, logical block 48, lost async page write [ 1150.879039] attempt to access beyond end of device [ 1150.895896] attempt to access beyond end of device [ 1150.896220] loop4: rw=2049, want=77, limit=16 [ 1150.896290] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 1150.899055] attempt to access beyond end of device [ 1150.899369] loop4: rw=2049, want=78, limit=16 [ 1150.899591] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 1150.901136] attempt to access beyond end of device [ 1150.901461] loop4: rw=2049, want=103, limit=16 [ 1150.901629] Buffer I/O error on dev loop4, logical block 102, lost async page write [ 1150.902981] attempt to access beyond end of device [ 1150.903066] loop4: rw=2049, want=104, limit=16 [ 1150.903146] Buffer I/O error on dev loop4, logical block 103, lost async page write [ 1150.904655] attempt to access beyond end of device [ 1150.904740] loop4: rw=2049, want=105, limit=16 [ 1150.904820] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 1150.905694] attempt to access beyond end of device [ 1150.905838] loop4: rw=2049, want=114, limit=16 [ 1150.915019] attempt to access beyond end of device [ 1150.915262] loop4: rw=2049, want=115, limit=16 [ 1150.916356] attempt to access beyond end of device [ 1150.916382] loop4: rw=2049, want=116, limit=16 [ 1150.920351] attempt to access beyond end of device [ 1150.920528] loop4: rw=2049, want=117, limit=16 [ 1150.921315] attempt to access beyond end of device [ 1150.921379] loop4: rw=2049, want=134, limit=16 [ 1150.922302] attempt to access beyond end of device [ 1150.922354] loop4: rw=2049, want=135, limit=16 [ 1150.923104] attempt to access beyond end of device [ 1150.923167] loop4: rw=2049, want=175, limit=16 [ 1150.925930] attempt to access beyond end of device [ 1150.938678] loop0: rw=2049, want=50, limit=16 [ 1151.005125] loop4: rw=2049, want=201, limit=16 [ 1151.008217] attempt to access beyond end of device [ 1151.008267] loop4: rw=2049, want=202, limit=16 [ 1151.009349] attempt to access beyond end of device [ 1151.009434] loop4: rw=2049, want=203, limit=16 [ 1151.010366] attempt to access beyond end of device [ 1151.010391] loop4: rw=2049, want=204, limit=16 [ 1151.012921] attempt to access beyond end of device [ 1151.013172] loop4: rw=2049, want=209, limit=16 [ 1151.013950] attempt to access beyond end of device [ 1151.014035] loop4: rw=2049, want=238, limit=16 [ 1151.015429] attempt to access beyond end of device [ 1151.015453] loop4: rw=2049, want=239, limit=16 [ 1151.016731] attempt to access beyond end of device [ 1151.023482] loop4: rw=2049, want=240, limit=16 [ 1151.364235] attempt to access beyond end of device [ 1151.369478] loop0: rw=2049, want=51, limit=16 [ 1151.374812] attempt to access beyond end of device [ 1151.380036] loop0: rw=2049, want=52, limit=16 [ 1151.385502] attempt to access beyond end of device [ 1151.391236] loop0: rw=2049, want=55, limit=16 [ 1151.404970] attempt to access beyond end of device [ 1151.410872] loop0: rw=2049, want=78, limit=16 [ 1151.416638] attempt to access beyond end of device [ 1151.428812] loop0: rw=2049, want=95, limit=16 [ 1151.434266] attempt to access beyond end of device [ 1151.444079] loop0: rw=2049, want=96, limit=16 10:39:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x9, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xff0f, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x0, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1151.453795] attempt to access beyond end of device [ 1151.465114] attempt to access beyond end of device [ 1151.472987] loop0: rw=2049, want=136, limit=16 [ 1151.484649] loop4: rw=1, want=44, limit=16 [ 1151.506351] attempt to access beyond end of device [ 1151.519111] attempt to access beyond end of device [ 1151.542099] loop0: rw=2049, want=137, limit=16 [ 1151.561028] loop4: rw=1, want=46, limit=16 [ 1151.568437] attempt to access beyond end of device [ 1151.579189] attempt to access beyond end of device [ 1151.662290] loop0: rw=2049, want=138, limit=16 [ 1151.681098] loop4: rw=1, want=47, limit=16 10:39:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0xa, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1151.781854] attempt to access beyond end of device [ 1151.787994] attempt to access beyond end of device [ 1151.829823] loop0: rw=2049, want=139, limit=16 [ 1151.834534] attempt to access beyond end of device [ 1151.839605] loop0: rw=2049, want=140, limit=16 [ 1151.844304] attempt to access beyond end of device [ 1151.849705] loop0: rw=2049, want=141, limit=16 [ 1151.856554] loop4: rw=1, want=48, limit=16 [ 1151.870207] attempt to access beyond end of device [ 1151.876423] attempt to access beyond end of device [ 1151.884217] loop0: rw=2049, want=142, limit=16 [ 1151.892376] loop4: rw=1, want=49, limit=16 [ 1151.899550] attempt to access beyond end of device [ 1151.904685] attempt to access beyond end of device [ 1151.913229] loop0: rw=2049, want=143, limit=16 [ 1151.921891] loop4: rw=1, want=50, limit=16 [ 1151.954880] attempt to access beyond end of device [ 1151.961033] attempt to access beyond end of device [ 1151.973210] attempt to access beyond end of device [ 1151.974678] loop2: rw=2049, want=128, limit=16 [ 1151.985695] attempt to access beyond end of device [ 1151.988848] loop0: rw=2049, want=167, limit=16 [ 1151.991379] loop2: rw=2049, want=193, limit=16 [ 1151.997636] loop4: rw=1, want=51, limit=16 [ 1152.002606] attempt to access beyond end of device [ 1152.010224] attempt to access beyond end of device [ 1152.010236] loop4: rw=1, want=52, limit=16 [ 1152.010324] attempt to access beyond end of device [ 1152.010334] loop4: rw=1, want=76, limit=16 [ 1152.010420] attempt to access beyond end of device [ 1152.010429] loop4: rw=1, want=102, limit=16 [ 1152.010496] attempt to access beyond end of device [ 1152.010505] loop4: rw=1, want=113, limit=16 [ 1152.010571] attempt to access beyond end of device [ 1152.010580] loop4: rw=1, want=133, limit=16 10:39:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), 0x0, 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1152.010667] attempt to access beyond end of device [ 1152.010683] loop4: rw=1, want=167, limit=16 [ 1152.010741] attempt to access beyond end of device [ 1152.010750] loop4: rw=1, want=168, limit=16 [ 1152.010780] attempt to access beyond end of device [ 1152.010788] loop4: rw=1, want=169, limit=16 [ 1152.010818] attempt to access beyond end of device [ 1152.010827] loop4: rw=1, want=170, limit=16 [ 1152.010855] attempt to access beyond end of device [ 1152.010864] loop4: rw=1, want=171, limit=16 [ 1152.010893] attempt to access beyond end of device [ 1152.010902] loop4: rw=1, want=172, limit=16 [ 1152.010931] attempt to access beyond end of device [ 1152.010940] loop4: rw=1, want=173, limit=16 [ 1152.010970] attempt to access beyond end of device [ 1152.010979] loop4: rw=1, want=174, limit=16 [ 1152.011007] attempt to access beyond end of device [ 1152.011016] loop4: rw=1, want=176, limit=16 [ 1152.011101] attempt to access beyond end of device [ 1152.011110] loop4: rw=1, want=200, limit=16 [ 1152.012365] attempt to access beyond end of device [ 1152.012376] loop4: rw=1, want=205, limit=16 [ 1152.012407] attempt to access beyond end of device [ 1152.012416] loop4: rw=1, want=206, limit=16 [ 1152.012446] attempt to access beyond end of device [ 1152.012455] loop4: rw=1, want=207, limit=16 [ 1152.012483] attempt to access beyond end of device [ 1152.012492] loop4: rw=1, want=208, limit=16 [ 1152.012521] attempt to access beyond end of device [ 1152.012530] loop4: rw=1, want=210, limit=16 [ 1152.012558] attempt to access beyond end of device [ 1152.012567] loop4: rw=1, want=211, limit=16 [ 1152.012595] attempt to access beyond end of device [ 1152.012604] loop4: rw=1, want=212, limit=16 [ 1152.012632] attempt to access beyond end of device [ 1152.012641] loop4: rw=1, want=213, limit=16 [ 1152.012724] attempt to access beyond end of device [ 1152.012734] loop4: rw=1, want=237, limit=16 10:39:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xfff0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1152.012807] attempt to access beyond end of device [ 1152.012816] loop4: rw=1, want=256, limit=16 [ 1152.291713] loop2: rw=2049, want=232, limit=16 10:39:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, r2, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x0, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1152.362114] attempt to access beyond end of device [ 1152.369325] loop0: rw=1, want=53, limit=16 [ 1152.374030] attempt to access beyond end of device [ 1152.381539] loop0: rw=1, want=54, limit=16 [ 1152.385995] attempt to access beyond end of device [ 1152.397467] attempt to access beyond end of device [ 1152.404408] loop2: rw=1, want=120, limit=16 [ 1152.437025] attempt to access beyond end of device 10:39:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0xb, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1152.467777] loop0: rw=1, want=56, limit=16 [ 1152.509864] attempt to access beyond end of device [ 1152.519134] loop2: rw=1, want=184, limit=16 [ 1152.560905] loop0: rw=1, want=57, limit=16 [ 1152.593308] attempt to access beyond end of device [ 1152.638531] attempt to access beyond end of device [ 1152.648231] attempt to access beyond end of device [ 1152.662094] loop2: rw=1, want=185, limit=16 [ 1152.666581] attempt to access beyond end of device [ 1152.671703] loop2: rw=1, want=194, limit=16 [ 1152.676191] attempt to access beyond end of device [ 1152.681345] loop2: rw=1, want=195, limit=16 [ 1152.685806] attempt to access beyond end of device [ 1152.690891] loop2: rw=1, want=196, limit=16 [ 1152.695299] loop0: rw=1, want=58, limit=16 [ 1152.695333] attempt to access beyond end of device [ 1152.704602] loop2: rw=1, want=197, limit=16 [ 1152.706341] loop4: rw=2049, want=48, limit=16 [ 1152.714458] attempt to access beyond end of device [ 1152.724286] attempt to access beyond end of device [ 1152.734188] attempt to access beyond end of device 10:39:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xfffff000, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1152.734770] loop2: rw=1, want=198, limit=16 [ 1152.744736] loop0: rw=1, want=59, limit=16 [ 1152.766544] attempt to access beyond end of device [ 1152.775481] attempt to access beyond end of device [ 1152.776064] loop4: rw=2049, want=129, limit=16 10:39:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0xc, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1152.784879] loop2: rw=1, want=199, limit=16 [ 1152.800396] loop0: rw=1, want=60, limit=16 [ 1152.808592] attempt to access beyond end of device [ 1152.810495] attempt to access beyond end of device [ 1152.818240] attempt to access beyond end of device [ 1152.826244] loop2: rw=1, want=200, limit=16 [ 1152.845473] loop0: rw=1, want=61, limit=16 [ 1152.847559] loop4: rw=2049, want=162, limit=16 [ 1152.857739] attempt to access beyond end of device [ 1152.863722] attempt to access beyond end of device [ 1152.882280] attempt to access beyond end of device [ 1152.885231] loop4: rw=2049, want=163, limit=16 [ 1152.907267] loop2: rw=1, want=224, limit=16 [ 1152.925470] loop0: rw=1, want=77, limit=16 [ 1152.929793] attempt to access beyond end of device [ 1152.930531] loop4: rw=2049, want=164, limit=16 [ 1152.951954] attempt to access beyond end of device [ 1152.967751] attempt to access beyond end of device [ 1152.984287] loop4: rw=2049, want=165, limit=16 [ 1152.990411] loop2: rw=1, want=259, limit=16 [ 1152.996038] attempt to access beyond end of device [ 1153.009687] loop4: rw=2049, want=166, limit=16 [ 1153.011327] attempt to access beyond end of device [ 1153.046860] attempt to access beyond end of device [ 1153.063821] loop0: rw=1, want=94, limit=16 [ 1153.082629] loop4: rw=2049, want=167, limit=16 [ 1153.091337] attempt to access beyond end of device [ 1153.130919] attempt to access beyond end of device [ 1153.193512] loop0: rw=1, want=128, limit=16 [ 1153.229646] loop4: rw=2049, want=168, limit=16 [ 1153.235539] attempt to access beyond end of device [ 1153.252465] attempt to access beyond end of device [ 1153.281724] loop0: rw=1, want=159, limit=16 [ 1153.303238] loop4: rw=2049, want=202, limit=16 [ 1153.314609] attempt to access beyond end of device [ 1153.376487] loop0: rw=1, want=160, limit=16 [ 1153.429780] attempt to access beyond end of device 10:39:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0xd, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), 0x0, 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1153.478694] loop0: rw=1, want=161, limit=16 [ 1153.504008] attempt to access beyond end of device [ 1153.509349] loop4: rw=1, want=128, limit=16 [ 1153.578179] attempt to access beyond end of device [ 1153.588595] attempt to access beyond end of device [ 1153.597078] loop4: rw=1, want=161, limit=16 [ 1153.601536] attempt to access beyond end of device [ 1153.606470] loop4: rw=1, want=192, limit=16 [ 1153.608782] attempt to access beyond end of device [ 1153.610976] attempt to access beyond end of device [ 1153.620762] loop4: rw=1, want=193, limit=16 [ 1153.625121] attempt to access beyond end of device [ 1153.630137] loop4: rw=1, want=194, limit=16 [ 1153.634490] attempt to access beyond end of device [ 1153.635982] loop2: rw=2049, want=57, limit=16 [ 1153.639477] loop4: rw=1, want=203, limit=16 [ 1153.639514] attempt to access beyond end of device [ 1153.639523] loop4: rw=1, want=204, limit=16 [ 1153.639554] attempt to access beyond end of device [ 1153.639562] loop4: rw=1, want=205, limit=16 [ 1153.639600] attempt to access beyond end of device [ 1153.639609] loop4: rw=1, want=206, limit=16 [ 1153.639639] attempt to access beyond end of device [ 1153.639648] loop4: rw=1, want=207, limit=16 [ 1153.639676] attempt to access beyond end of device [ 1153.639684] loop4: rw=1, want=208, limit=16 [ 1153.639772] attempt to access beyond end of device [ 1153.639781] loop4: rw=1, want=240, limit=16 [ 1153.639841] attempt to access beyond end of device [ 1153.639850] loop4: rw=1, want=241, limit=16 [ 1153.639880] attempt to access beyond end of device [ 1153.639889] loop4: rw=1, want=243, limit=16 [ 1153.639918] attempt to access beyond end of device [ 1153.639926] loop4: rw=1, want=244, limit=16 [ 1153.639955] attempt to access beyond end of device [ 1153.639963] loop4: rw=1, want=245, limit=16 [ 1153.639993] attempt to access beyond end of device [ 1153.640002] loop4: rw=1, want=246, limit=16 [ 1153.640029] attempt to access beyond end of device [ 1153.640038] loop4: rw=1, want=247, limit=16 [ 1153.640067] attempt to access beyond end of device [ 1153.640076] loop4: rw=1, want=248, limit=16 [ 1153.640104] attempt to access beyond end of device [ 1153.640113] loop4: rw=1, want=249, limit=16 [ 1153.640171] attempt to access beyond end of device [ 1153.640180] loop4: rw=1, want=257, limit=16 [ 1153.640304] loop0: rw=1, want=162, limit=16 [ 1153.677570] attempt to access beyond end of device [ 1153.707863] attempt to access beyond end of device [ 1153.716723] loop2: rw=2049, want=82, limit=16 [ 1153.732165] loop0: rw=1, want=163, limit=16 [ 1153.732209] attempt to access beyond end of device [ 1153.742587] attempt to access beyond end of device [ 1153.754123] loop0: rw=1, want=164, limit=16 [ 1153.754168] attempt to access beyond end of device [ 1153.754178] loop0: rw=1, want=165, limit=16 [ 1153.754212] attempt to access beyond end of device [ 1153.754279] loop0: rw=1, want=166, limit=16 [ 1153.754310] attempt to access beyond end of device [ 1153.754319] loop0: rw=1, want=168, limit=16 [ 1153.754470] attempt to access beyond end of device [ 1153.754480] loop0: rw=1, want=224, limit=16 [ 1153.754553] attempt to access beyond end of device [ 1153.754568] loop0: rw=1, want=226, limit=16 [ 1153.754598] attempt to access beyond end of device [ 1153.754607] loop0: rw=1, want=227, limit=16 [ 1153.754635] attempt to access beyond end of device [ 1153.754645] loop0: rw=1, want=229, limit=16 [ 1153.754673] attempt to access beyond end of device [ 1153.754682] loop0: rw=1, want=230, limit=16 [ 1153.754711] attempt to access beyond end of device [ 1153.754719] loop0: rw=1, want=231, limit=16 [ 1153.754748] attempt to access beyond end of device 10:39:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xfffffff0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1153.754757] loop0: rw=1, want=232, limit=16 [ 1153.754784] attempt to access beyond end of device [ 1153.754793] loop0: rw=1, want=233, limit=16 [ 1153.754822] attempt to access beyond end of device [ 1153.754830] loop0: rw=1, want=234, limit=16 [ 1153.754904] attempt to access beyond end of device [ 1153.754913] loop0: rw=1, want=258, limit=16 10:39:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0xe, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1154.206827] loop2: rw=2049, want=83, limit=16 [ 1154.211978] attempt to access beyond end of device [ 1154.217572] loop2: rw=2049, want=109, limit=16 [ 1154.222211] attempt to access beyond end of device [ 1154.228473] loop2: rw=2049, want=110, limit=16 [ 1154.233897] attempt to access beyond end of device [ 1154.246689] loop2: rw=2049, want=139, limit=16 10:39:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0xfffffffe, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1154.282160] attempt to access beyond end of device [ 1154.324478] loop2: rw=2049, want=140, limit=16 [ 1154.354085] attempt to access beyond end of device [ 1154.432459] loop2: rw=2049, want=141, limit=16 [ 1154.437763] attempt to access beyond end of device [ 1154.443042] loop2: rw=2049, want=192, limit=16 [ 1154.455378] attempt to access beyond end of device [ 1154.461782] loop0: rw=2049, want=56, limit=16 10:39:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x0, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x0, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1154.577363] attempt to access beyond end of device [ 1154.587090] loop2: rw=1, want=56, limit=16 [ 1154.617395] attempt to access beyond end of device 10:39:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), 0x0, 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0xf, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1154.650156] attempt to access beyond end of device [ 1154.658112] attempt to access beyond end of device [ 1154.663117] loop0: rw=1, want=254, limit=16 [ 1154.670054] loop2: rw=1, want=81, limit=16 [ 1154.675048] attempt to access beyond end of device [ 1154.680219] loop2: rw=1, want=107, limit=16 [ 1154.686107] attempt to access beyond end of device [ 1154.725838] loop4: rw=2049, want=32, limit=16 [ 1154.742868] loop0: rw=1, want=255, limit=16 [ 1154.748337] attempt to access beyond end of device [ 1154.753281] loop2: rw=1, want=108, limit=16 [ 1154.773775] attempt to access beyond end of device [ 1154.817353] attempt to access beyond end of device [ 1154.843403] loop4: rw=2049, want=33, limit=16 [ 1154.853961] loop0: rw=1, want=256, limit=16 [ 1154.862894] attempt to access beyond end of device [ 1154.886989] attempt to access beyond end of device [ 1154.893416] attempt to access beyond end of device [ 1154.903333] loop2: rw=1, want=111, limit=16 [ 1154.922425] loop4: rw=2049, want=130, limit=16 [ 1154.928489] attempt to access beyond end of device [ 1154.933883] loop0: rw=1, want=257, limit=16 [ 1154.945305] loop2: rw=1, want=112, limit=16 [ 1154.954853] attempt to access beyond end of device [ 1154.962425] attempt to access beyond end of device [ 1154.975834] attempt to access beyond end of device [ 1154.984702] loop4: rw=2049, want=131, limit=16 [ 1154.991023] loop0: rw=1, want=258, limit=16 [ 1155.127972] attempt to access beyond end of device [ 1155.136410] attempt to access beyond end of device [ 1155.145246] loop2: rw=1, want=113, limit=16 10:39:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x10, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1155.174210] loop0: rw=1, want=259, limit=16 [ 1155.175434] attempt to access beyond end of device [ 1155.182152] loop4: rw=2049, want=132, limit=16 [ 1155.213367] loop2: rw=1, want=114, limit=16 [ 1155.224941] attempt to access beyond end of device [ 1155.245522] attempt to access beyond end of device [ 1155.251565] attempt to access beyond end of device [ 1155.263981] loop0: rw=1, want=260, limit=16 [ 1155.278486] loop2: rw=1, want=115, limit=16 [ 1155.282953] loop4: rw=2049, want=133, limit=16 [ 1155.291938] attempt to access beyond end of device [ 1155.301612] attempt to access beyond end of device [ 1155.320134] loop2: rw=1, want=116, limit=16 [ 1155.327428] attempt to access beyond end of device [ 1155.334726] loop0: rw=1, want=261, limit=16 10:39:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x2, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1155.354788] attempt to access beyond end of device [ 1155.361083] loop4: rw=2049, want=134, limit=16 [ 1155.370518] loop2: rw=1, want=117, limit=16 [ 1155.376356] attempt to access beyond end of device [ 1155.386792] attempt to access beyond end of device [ 1155.395756] loop4: rw=2049, want=135, limit=16 [ 1155.405258] loop2: rw=1, want=133, limit=16 [ 1155.411151] attempt to access beyond end of device [ 1155.423016] attempt to access beyond end of device [ 1155.432599] loop4: rw=2049, want=136, limit=16 [ 1155.444092] loop2: rw=1, want=134, limit=16 [ 1155.450971] attempt to access beyond end of device [ 1155.463836] attempt to access beyond end of device [ 1155.471657] loop4: rw=2049, want=144, limit=16 [ 1155.485258] loop2: rw=1, want=135, limit=16 [ 1155.491866] attempt to access beyond end of device [ 1155.505884] attempt to access beyond end of device [ 1155.514520] loop4: rw=2049, want=145, limit=16 [ 1155.523421] loop2: rw=1, want=136, limit=16 [ 1155.530318] attempt to access beyond end of device [ 1155.541096] attempt to access beyond end of device [ 1155.567748] loop4: rw=2049, want=215, limit=16 [ 1155.592011] loop2: rw=1, want=137, limit=16 [ 1155.605995] attempt to access beyond end of device [ 1155.633431] attempt to access beyond end of device [ 1155.653323] loop4: rw=2049, want=216, limit=16 [ 1155.679367] loop2: rw=1, want=138, limit=16 [ 1155.695713] buffer_io_error: 147 callbacks suppressed [ 1155.695724] Buffer I/O error on dev loop4, logical block 215, lost async page write [ 1155.740026] Buffer I/O error on dev loop2, logical block 137, lost async page write [ 1155.750970] attempt to access beyond end of device [ 1155.755249] attempt to access beyond end of device [ 1155.765995] loop4: rw=2049, want=217, limit=16 [ 1155.767288] loop0: rw=2049, want=32, limit=16 [ 1155.778596] attempt to access beyond end of device [ 1155.780665] Buffer I/O error on dev loop4, logical block 216, lost async page write [ 1155.784268] attempt to access beyond end of device [ 1155.791929] attempt to access beyond end of device [ 1155.808014] loop2: rw=1, want=142, limit=16 [ 1155.812465] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 1155.821376] loop0: rw=2049, want=33, limit=16 [ 1155.825943] loop4: rw=2049, want=218, limit=16 [ 1155.825960] Buffer I/O error on dev loop4, logical block 217, lost async page write [ 1155.826008] attempt to access beyond end of device [ 1155.833248] attempt to access beyond end of device [ 1155.850831] Buffer I/O error on dev loop0, logical block 32, lost async page write [ 1155.860514] attempt to access beyond end of device [ 1155.865731] loop2: rw=1, want=143, limit=16 [ 1155.871403] loop0: rw=2049, want=34, limit=16 [ 1155.876093] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 1155.876910] loop4: rw=2049, want=219, limit=16 [ 1155.885304] Buffer I/O error on dev loop0, logical block 33, lost async page write [ 1155.894582] attempt to access beyond end of device [ 1155.903711] loop2: rw=1, want=144, limit=16 [ 1155.907486] attempt to access beyond end of device [ 1155.914023] Buffer I/O error on dev loop4, logical block 218, lost async page write [ 1155.915746] loop0: rw=2049, want=35, limit=16 [ 1155.921993] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 1155.922118] attempt to access beyond end of device [ 1155.922129] loop2: rw=1, want=184, limit=16 [ 1155.922257] attempt to access beyond end of device [ 1155.922267] loop2: rw=1, want=256, limit=16 [ 1155.922730] attempt to access beyond end of device [ 1155.941781] attempt to access beyond end of device [ 1155.954889] loop4: rw=2049, want=220, limit=16 [ 1155.959470] loop0: rw=2049, want=36, limit=16 [ 1155.971461] attempt to access beyond end of device [ 1155.974213] attempt to access beyond end of device [ 1155.984303] loop0: rw=2049, want=37, limit=16 [ 1155.991230] attempt to access beyond end of device [ 1155.992274] loop4: rw=2049, want=221, limit=16 [ 1155.996334] loop0: rw=2049, want=38, limit=16 [ 1156.030265] attempt to access beyond end of device [ 1156.036322] attempt to access beyond end of device [ 1156.046282] loop4: rw=2049, want=229, limit=16 [ 1156.046618] loop0: rw=2049, want=39, limit=16 [ 1156.059802] attempt to access beyond end of device [ 1156.070253] loop0: rw=2049, want=64, limit=16 [ 1156.082749] attempt to access beyond end of device [ 1156.090436] loop0: rw=2049, want=97, limit=16 10:39:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x11, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x3, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1156.143524] attempt to access beyond end of device [ 1156.153968] attempt to access beyond end of device [ 1156.164666] loop4: rw=1, want=129, limit=16 [ 1156.183659] loop0: rw=2049, want=98, limit=16 [ 1156.195836] attempt to access beyond end of device [ 1156.216677] attempt to access beyond end of device [ 1156.229636] loop4: rw=1, want=209, limit=16 [ 1156.240523] attempt to access beyond end of device [ 1156.246583] loop2: rw=2049, want=40, limit=16 [ 1156.249289] loop0: rw=2049, want=99, limit=16 [ 1156.251948] attempt to access beyond end of device [ 1156.256045] attempt to access beyond end of device [ 1156.261783] loop2: rw=2049, want=89, limit=16 [ 1156.270688] attempt to access beyond end of device [ 1156.271785] attempt to access beyond end of device [ 1156.276214] loop4: rw=1, want=210, limit=16 [ 1156.281526] loop2: rw=2049, want=90, limit=16 [ 1156.291047] attempt to access beyond end of device [ 1156.296258] loop2: rw=2049, want=109, limit=16 [ 1156.302462] attempt to access beyond end of device [ 1156.308147] loop2: rw=2049, want=119, limit=16 [ 1156.333951] loop0: rw=2049, want=140, limit=16 [ 1156.335964] attempt to access beyond end of device [ 1156.336113] loop0: rw=2049, want=141, limit=16 [ 1156.338126] attempt to access beyond end of device [ 1156.338139] loop4: rw=1, want=211, limit=16 [ 1156.338168] attempt to access beyond end of device [ 1156.338177] loop4: rw=1, want=212, limit=16 [ 1156.338262] attempt to access beyond end of device [ 1156.338271] loop4: rw=1, want=213, limit=16 [ 1156.338302] attempt to access beyond end of device [ 1156.338310] loop4: rw=1, want=214, limit=16 [ 1156.338338] attempt to access beyond end of device [ 1156.338347] loop4: rw=1, want=230, limit=16 [ 1156.338388] attempt to access beyond end of device [ 1156.338397] loop4: rw=1, want=231, limit=16 [ 1156.338426] attempt to access beyond end of device [ 1156.338435] loop4: rw=1, want=232, limit=16 [ 1156.338524] attempt to access beyond end of device [ 1156.338532] loop4: rw=1, want=256, limit=16 [ 1156.339906] attempt to access beyond end of device [ 1156.350282] attempt to access beyond end of device [ 1156.350481] loop2: rw=2049, want=120, limit=16 [ 1156.476316] attempt to access beyond end of device [ 1156.482289] loop2: rw=2049, want=121, limit=16 [ 1156.489181] attempt to access beyond end of device [ 1156.491047] loop0: rw=2049, want=142, limit=16 [ 1156.494275] loop2: rw=2049, want=122, limit=16 [ 1156.512071] attempt to access beyond end of device 10:39:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x12, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1156.552999] loop2: rw=2049, want=123, limit=16 [ 1156.564069] attempt to access beyond end of device [ 1156.571049] loop0: rw=2049, want=143, limit=16 [ 1156.605253] attempt to access beyond end of device 10:39:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1156.633000] loop0: rw=2049, want=144, limit=16 [ 1156.638287] attempt to access beyond end of device [ 1156.643386] loop0: rw=2049, want=176, limit=16 [ 1156.658528] attempt to access beyond end of device [ 1156.666013] loop0: rw=2049, want=203, limit=16 [ 1156.676720] attempt to access beyond end of device 10:39:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x4, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1156.683298] loop0: rw=2049, want=204, limit=16 [ 1156.689942] attempt to access beyond end of device [ 1156.702220] attempt to access beyond end of device [ 1156.708293] loop2: rw=1, want=88, limit=16 [ 1156.717812] loop0: rw=2049, want=205, limit=16 [ 1156.724124] attempt to access beyond end of device [ 1156.737042] loop0: rw=2049, want=206, limit=16 [ 1156.746204] attempt to access beyond end of device [ 1156.749710] attempt to access beyond end of device [ 1156.762699] loop0: rw=2049, want=207, limit=16 [ 1156.800618] attempt to access beyond end of device [ 1156.806084] loop2: rw=1, want=106, limit=16 [ 1156.837261] loop0: rw=2049, want=236, limit=16 [ 1156.844646] attempt to access beyond end of device [ 1156.860512] loop2: rw=1, want=107, limit=16 [ 1156.867192] attempt to access beyond end of device [ 1156.870674] attempt to access beyond end of device [ 1156.885401] loop2: rw=1, want=108, limit=16 [ 1156.902441] attempt to access beyond end of device [ 1156.907749] loop4: rw=1, want=256, limit=16 [ 1156.914785] attempt to access beyond end of device [ 1156.915507] loop0: rw=2049, want=237, limit=16 [ 1156.931199] loop2: rw=1, want=110, limit=16 [ 1156.936256] attempt to access beyond end of device [ 1156.942173] loop2: rw=1, want=111, limit=16 [ 1156.948362] attempt to access beyond end of device [ 1156.953773] loop2: rw=1, want=112, limit=16 [ 1156.958894] attempt to access beyond end of device [ 1156.963902] loop2: rw=1, want=113, limit=16 [ 1156.968427] attempt to access beyond end of device [ 1156.973351] loop2: rw=1, want=114, limit=16 [ 1156.977859] attempt to access beyond end of device [ 1156.982780] loop2: rw=1, want=115, limit=16 [ 1156.994199] attempt to access beyond end of device [ 1157.004173] loop2: rw=1, want=116, limit=16 10:39:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x0, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x13, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x5, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1157.012095] attempt to access beyond end of device [ 1157.019023] loop2: rw=1, want=117, limit=16 [ 1157.023451] attempt to access beyond end of device [ 1157.029885] loop2: rw=1, want=118, limit=16 [ 1157.034945] attempt to access beyond end of device [ 1157.042253] attempt to access beyond end of device [ 1157.045657] loop0: rw=1, want=63, limit=16 [ 1157.056029] attempt to access beyond end of device [ 1157.069890] loop2: rw=1, want=126, limit=16 [ 1157.080360] attempt to access beyond end of device [ 1157.083481] loop0: rw=1, want=96, limit=16 [ 1157.113883] attempt to access beyond end of device [ 1157.120706] loop2: rw=1, want=127, limit=16 [ 1157.125069] loop0: rw=1, want=139, limit=16 [ 1157.125194] attempt to access beyond end of device 10:39:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x14, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1157.163511] loop0: rw=1, want=168, limit=16 [ 1157.195784] attempt to access beyond end of device [ 1157.270996] loop0: rw=1, want=169, limit=16 [ 1157.288368] attempt to access beyond end of device [ 1157.310062] loop2: rw=1, want=128, limit=16 [ 1157.330900] attempt to access beyond end of device [ 1157.356290] attempt to access beyond end of device [ 1157.370269] loop0: rw=1, want=170, limit=16 [ 1157.375763] attempt to access beyond end of device [ 1157.381227] loop4: rw=2049, want=48, limit=16 [ 1157.403447] attempt to access beyond end of device [ 1157.409583] loop0: rw=1, want=171, limit=16 [ 1157.414149] attempt to access beyond end of device [ 1157.425530] loop2: rw=1, want=129, limit=16 [ 1157.437707] attempt to access beyond end of device [ 1157.445675] loop0: rw=1, want=172, limit=16 [ 1157.447744] attempt to access beyond end of device 10:39:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x7, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1157.455923] attempt to access beyond end of device [ 1157.460712] loop2: rw=1, want=130, limit=16 [ 1157.462250] loop4: rw=2049, want=65, limit=16 [ 1157.472392] loop0: rw=1, want=173, limit=16 [ 1157.475156] attempt to access beyond end of device [ 1157.477922] attempt to access beyond end of device [ 1157.486425] loop2: rw=1, want=155, limit=16 [ 1157.488378] attempt to access beyond end of device [ 1157.496243] loop4: rw=2049, want=66, limit=16 10:39:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x15, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1157.504053] loop0: rw=1, want=174, limit=16 [ 1157.509799] attempt to access beyond end of device [ 1157.515964] attempt to access beyond end of device [ 1157.518486] attempt to access beyond end of device [ 1157.528178] loop4: rw=2049, want=67, limit=16 [ 1157.533249] loop2: rw=1, want=253, limit=16 [ 1157.535018] loop0: rw=1, want=175, limit=16 [ 1157.555933] attempt to access beyond end of device [ 1157.562746] loop4: rw=2049, want=68, limit=16 [ 1157.568549] attempt to access beyond end of device [ 1157.574330] attempt to access beyond end of device [ 1157.581108] loop0: rw=1, want=177, limit=16 [ 1157.585557] loop4: rw=2049, want=69, limit=16 [ 1157.597006] attempt to access beyond end of device [ 1157.609240] attempt to access beyond end of device [ 1157.615599] loop0: rw=1, want=201, limit=16 [ 1157.625502] loop4: rw=2049, want=70, limit=16 [ 1157.646472] attempt to access beyond end of device [ 1157.664835] attempt to access beyond end of device [ 1157.672689] loop0: rw=1, want=202, limit=16 [ 1157.693120] attempt to access beyond end of device [ 1157.699569] loop4: rw=2049, want=71, limit=16 [ 1157.714400] loop0: rw=1, want=208, limit=16 [ 1157.719737] attempt to access beyond end of device [ 1157.738801] attempt to access beyond end of device [ 1157.747541] loop4: rw=2049, want=79, limit=16 10:39:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x8, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1157.780202] attempt to access beyond end of device [ 1157.785375] loop0: rw=1, want=209, limit=16 [ 1157.799840] attempt to access beyond end of device [ 1157.808941] loop4: rw=2049, want=168, limit=16 [ 1157.834995] loop0: rw=1, want=210, limit=16 [ 1157.844378] attempt to access beyond end of device [ 1157.876869] attempt to access beyond end of device [ 1157.877295] loop2: rw=2049, want=40, limit=16 [ 1157.880292] attempt to access beyond end of device [ 1157.880584] loop2: rw=2049, want=41, limit=16 [ 1157.881757] attempt to access beyond end of device [ 1157.881862] loop2: rw=2049, want=89, limit=16 [ 1157.883165] attempt to access beyond end of device [ 1157.883189] loop2: rw=2049, want=90, limit=16 [ 1157.885174] attempt to access beyond end of device [ 1157.885270] loop2: rw=2049, want=92, limit=16 10:39:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x16, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1157.887892] attempt to access beyond end of device [ 1157.888016] loop2: rw=2049, want=125, limit=16 [ 1157.889454] attempt to access beyond end of device [ 1157.958371] attempt to access beyond end of device [ 1157.965326] loop2: rw=2049, want=127, limit=16 [ 1157.970798] attempt to access beyond end of device [ 1157.973589] loop4: rw=2049, want=169, limit=16 [ 1157.981006] loop2: rw=2049, want=133, limit=16 [ 1157.986311] attempt to access beyond end of device [ 1157.991427] loop2: rw=2049, want=160, limit=16 [ 1157.997496] attempt to access beyond end of device [ 1158.002702] loop2: rw=2049, want=193, limit=16 [ 1158.008473] attempt to access beyond end of device [ 1158.017169] loop4: rw=2049, want=170, limit=16 [ 1158.021808] attempt to access beyond end of device [ 1158.027261] attempt to access beyond end of device [ 1158.032295] loop2: rw=2049, want=215, limit=16 [ 1158.037143] loop0: rw=1, want=211, limit=16 [ 1158.042033] attempt to access beyond end of device [ 1158.047088] loop0: rw=1, want=212, limit=16 [ 1158.051994] attempt to access beyond end of device [ 1158.057668] loop4: rw=2049, want=188, limit=16 [ 1158.062297] attempt to access beyond end of device [ 1158.069721] attempt to access beyond end of device [ 1158.074886] loop2: rw=2049, want=216, limit=16 [ 1158.097172] loop0: rw=1, want=213, limit=16 [ 1158.101554] attempt to access beyond end of device [ 1158.123172] loop4: rw=2049, want=196, limit=16 [ 1158.135819] attempt to access beyond end of device [ 1158.147510] attempt to access beyond end of device [ 1158.152465] loop4: rw=2049, want=197, limit=16 [ 1158.161339] loop2: rw=2049, want=217, limit=16 [ 1158.177946] loop0: rw=1, want=214, limit=16 [ 1158.182385] attempt to access beyond end of device [ 1158.189036] attempt to access beyond end of device [ 1158.194111] loop2: rw=2049, want=218, limit=16 [ 1158.205698] attempt to access beyond end of device [ 1158.219130] loop0: rw=1, want=230, limit=16 [ 1158.223535] attempt to access beyond end of device [ 1158.229854] attempt to access beyond end of device [ 1158.235097] loop2: rw=2049, want=219, limit=16 [ 1158.240470] loop4: rw=2049, want=198, limit=16 [ 1158.240522] attempt to access beyond end of device [ 1158.240532] loop4: rw=2049, want=199, limit=16 [ 1158.240569] attempt to access beyond end of device [ 1158.240579] loop4: rw=2049, want=200, limit=16 [ 1158.240662] attempt to access beyond end of device [ 1158.240672] loop4: rw=2049, want=208, limit=16 [ 1158.240848] loop0: rw=1, want=231, limit=16 [ 1158.240887] attempt to access beyond end of device [ 1158.240896] loop0: rw=1, want=232, limit=16 [ 1158.240927] attempt to access beyond end of device [ 1158.240952] loop0: rw=1, want=233, limit=16 [ 1158.240982] attempt to access beyond end of device [ 1158.240992] loop0: rw=1, want=234, limit=16 [ 1158.241021] attempt to access beyond end of device [ 1158.241030] loop0: rw=1, want=235, limit=16 [ 1158.241059] attempt to access beyond end of device [ 1158.241068] loop0: rw=1, want=238, limit=16 [ 1158.241104] attempt to access beyond end of device [ 1158.255488] attempt to access beyond end of device [ 1158.269664] loop0: rw=1, want=239, limit=16 [ 1158.269720] attempt to access beyond end of device [ 1158.269730] loop0: rw=1, want=240, limit=16 [ 1158.269812] attempt to access beyond end of device [ 1158.269821] loop0: rw=1, want=256, limit=16 [ 1158.379751] loop2: rw=2049, want=220, limit=16 [ 1158.384837] attempt to access beyond end of device [ 1158.406487] loop2: rw=2049, want=221, limit=16 [ 1158.432645] attempt to access beyond end of device [ 1158.438359] loop4: rw=1, want=64, limit=16 [ 1158.442693] attempt to access beyond end of device [ 1158.448040] loop4: rw=1, want=72, limit=16 [ 1158.452388] attempt to access beyond end of device [ 1158.457757] loop4: rw=1, want=73, limit=16 [ 1158.463014] attempt to access beyond end of device [ 1158.470466] loop4: rw=1, want=74, limit=16 10:39:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1158.479185] attempt to access beyond end of device [ 1158.490296] loop4: rw=1, want=75, limit=16 [ 1158.494822] attempt to access beyond end of device [ 1158.509039] attempt to access beyond end of device [ 1158.511951] loop4: rw=1, want=76, limit=16 [ 1158.514282] loop2: rw=1, want=81, limit=16 [ 1158.534259] attempt to access beyond end of device [ 1158.560088] attempt to access beyond end of device [ 1158.564041] loop2: rw=1, want=82, limit=16 [ 1158.591227] attempt to access beyond end of device [ 1158.599743] loop4: rw=1, want=77, limit=16 [ 1158.604035] attempt to access beyond end of device [ 1158.622983] attempt to access beyond end of device [ 1158.627367] loop2: rw=1, want=83, limit=16 [ 1158.636701] loop0: rw=2049, want=72, limit=16 [ 1158.648091] loop4: rw=1, want=78, limit=16 [ 1158.658213] attempt to access beyond end of device [ 1158.671912] attempt to access beyond end of device [ 1158.679016] loop4: rw=1, want=80, limit=16 [ 1158.683425] attempt to access beyond end of device [ 1158.689594] loop2: rw=1, want=84, limit=16 [ 1158.693875] attempt to access beyond end of device [ 1158.700031] loop4: rw=1, want=160, limit=16 [ 1158.704495] attempt to access beyond end of device [ 1158.710894] loop2: rw=1, want=85, limit=16 [ 1158.716092] attempt to access beyond end of device 10:39:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x9, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:39:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x17, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:39:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, r2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1158.722286] loop4: rw=1, want=186, limit=16 [ 1158.728685] loop2: rw=1, want=86, limit=16 [ 1158.733029] attempt to access beyond end of device [ 1158.747812] attempt to access beyond end of device [ 1158.760724] loop4: rw=1, want=187, limit=16 [ 1158.765123] loop2: rw=1, want=87, limit=16 [ 1158.781406] attempt to access beyond end of device [ 1158.786468] loop0: rw=1, want=256, limit=16 [ 1158.790884] attempt to access beyond end of device [ 1158.795902] attempt to access beyond end of device [ 1158.815693] loop4: rw=1, want=189, limit=16 [ 1158.821224] loop2: rw=1, want=88, limit=16 [ 1158.833739] attempt to access beyond end of device [ 1158.846406] attempt to access beyond end of device [ 1158.912858] loop4: rw=1, want=190, limit=16 [ 1158.918389] loop2: rw=1, want=91, limit=16 [ 1158.955554] attempt to access beyond end of device [ 1158.961601] attempt to access beyond end of device 10:39:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x18, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1159.022193] loop4: rw=1, want=191, limit=16 [ 1159.027742] loop2: rw=1, want=124, limit=16 [ 1159.080790] attempt to access beyond end of device [ 1159.087353] attempt to access beyond end of device [ 1159.163642] loop2: rw=1, want=126, limit=16 [ 1159.169651] loop4: rw=1, want=192, limit=16 [ 1159.245924] attempt to access beyond end of device [ 1159.251919] attempt to access beyond end of device [ 1159.307938] loop4: rw=1, want=193, limit=16 [ 1159.312946] loop2: rw=1, want=128, limit=16 [ 1159.363369] attempt to access beyond end of device [ 1159.394608] attempt to access beyond end of device 10:39:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0xd, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1159.418610] attempt to access beyond end of device [ 1159.419135] loop4: rw=1, want=194, limit=16 [ 1159.433054] attempt to access beyond end of device [ 1159.439028] loop4: rw=1, want=195, limit=16 [ 1159.456370] attempt to access beyond end of device [ 1159.464605] loop4: rw=1, want=256, limit=16 10:39:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1159.465047] loop2: rw=1, want=129, limit=16 [ 1159.478924] loop0: rw=2049, want=80, limit=16 [ 1159.495315] attempt to access beyond end of device [ 1159.502524] attempt to access beyond end of device [ 1159.503300] loop0: rw=2049, want=81, limit=16 10:39:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x19, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1159.523476] attempt to access beyond end of device [ 1159.546374] loop2: rw=1, want=130, limit=16 [ 1159.557194] loop0: rw=2049, want=82, limit=16 [ 1159.564748] attempt to access beyond end of device [ 1159.613584] attempt to access beyond end of device [ 1159.631894] loop2: rw=1, want=131, limit=16 [ 1159.643199] loop0: rw=2049, want=83, limit=16 [ 1159.649219] attempt to access beyond end of device [ 1159.658359] attempt to access beyond end of device [ 1159.659293] loop0: rw=2049, want=84, limit=16 [ 1159.685718] loop2: rw=1, want=132, limit=16 [ 1159.714176] attempt to access beyond end of device 10:39:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0xf, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1159.735732] attempt to access beyond end of device [ 1159.755484] loop0: rw=2049, want=85, limit=16 10:39:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1a, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1159.782758] attempt to access beyond end of device [ 1159.790937] loop2: rw=1, want=134, limit=16 [ 1159.804880] FAT-fs (loop5): bogus number of reserved sectors [ 1159.826218] attempt to access beyond end of device [ 1159.831422] loop0: rw=2049, want=208, limit=16 [ 1159.837469] attempt to access beyond end of device [ 1159.842555] loop0: rw=2049, want=209, limit=16 [ 1159.843066] loop4: rw=2049, want=48, limit=16 [ 1159.847958] attempt to access beyond end of device [ 1159.857567] loop0: rw=2049, want=210, limit=16 [ 1159.861853] attempt to access beyond end of device [ 1159.862928] attempt to access beyond end of device [ 1159.872722] loop0: rw=2049, want=218, limit=16 [ 1159.878393] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1159.887447] attempt to access beyond end of device [ 1159.896298] loop2: rw=1, want=135, limit=16 [ 1159.900741] loop4: rw=2049, want=49, limit=16 [ 1159.905544] attempt to access beyond end of device [ 1159.913163] attempt to access beyond end of device [ 1159.919393] loop2: rw=1, want=159, limit=16 [ 1159.927519] loop4: rw=2049, want=122, limit=16 [ 1159.935803] attempt to access beyond end of device [ 1159.944716] attempt to access beyond end of device [ 1159.968526] loop2: rw=1, want=192, limit=16 [ 1159.977960] loop4: rw=2049, want=123, limit=16 [ 1159.987906] attempt to access beyond end of device [ 1160.003240] attempt to access beyond end of device [ 1160.016486] loop2: rw=1, want=209, limit=16 [ 1160.030127] loop4: rw=2049, want=124, limit=16 [ 1160.050486] attempt to access beyond end of device [ 1160.064847] attempt to access beyond end of device [ 1160.073961] loop2: rw=1, want=210, limit=16 [ 1160.086496] loop4: rw=2049, want=125, limit=16 [ 1160.094909] attempt to access beyond end of device [ 1160.101475] attempt to access beyond end of device [ 1160.109120] loop0: rw=1, want=72, limit=16 [ 1160.123798] attempt to access beyond end of device [ 1160.133411] loop2: rw=1, want=211, limit=16 [ 1160.149887] attempt to access beyond end of device [ 1160.169115] loop4: rw=2049, want=126, limit=16 [ 1160.169633] attempt to access beyond end of device [ 1160.174314] attempt to access beyond end of device [ 1160.183835] loop0: rw=1, want=205, limit=16 [ 1160.184645] loop4: rw=2049, want=127, limit=16 [ 1160.195756] attempt to access beyond end of device [ 1160.213091] attempt to access beyond end of device [ 1160.225237] loop2: rw=1, want=212, limit=16 [ 1160.228849] loop4: rw=2049, want=128, limit=16 [ 1160.234775] loop0: rw=1, want=206, limit=16 [ 1160.243735] attempt to access beyond end of device [ 1160.244791] attempt to access beyond end of device [ 1160.253330] attempt to access beyond end of device [ 1160.268360] loop0: rw=1, want=207, limit=16 [ 1160.273627] loop2: rw=1, want=213, limit=16 [ 1160.278101] attempt to access beyond end of device [ 1160.278112] loop0: rw=1, want=219, limit=16 [ 1160.278147] attempt to access beyond end of device [ 1160.278156] loop0: rw=1, want=220, limit=16 [ 1160.278183] attempt to access beyond end of device [ 1160.284662] loop4: rw=2049, want=144, limit=16 [ 1160.311746] loop0: rw=1, want=221, limit=16 [ 1160.311800] attempt to access beyond end of device [ 1160.311809] loop0: rw=1, want=222, limit=16 [ 1160.311837] attempt to access beyond end of device [ 1160.311846] loop0: rw=1, want=223, limit=16 [ 1160.311876] attempt to access beyond end of device [ 1160.311885] loop0: rw=1, want=224, limit=16 [ 1160.311981] attempt to access beyond end of device [ 1160.311990] loop0: rw=1, want=256, limit=16 [ 1160.363638] attempt to access beyond end of device [ 1160.369601] loop2: rw=1, want=214, limit=16 [ 1160.374090] attempt to access beyond end of device [ 1160.379467] loop2: rw=1, want=222, limit=16 [ 1160.383944] attempt to access beyond end of device [ 1160.389297] loop2: rw=1, want=223, limit=16 [ 1160.393780] attempt to access beyond end of device [ 1160.399212] loop2: rw=1, want=224, limit=16 [ 1160.403740] attempt to access beyond end of device [ 1160.409696] loop2: rw=1, want=240, limit=16 [ 1160.424704] attempt to access beyond end of device [ 1160.438705] attempt to access beyond end of device [ 1160.441616] loop2: rw=1, want=241, limit=16 [ 1160.443962] loop4: rw=2049, want=165, limit=16 [ 1160.454772] attempt to access beyond end of device [ 1160.457541] attempt to access beyond end of device [ 1160.460464] loop4: rw=2049, want=166, limit=16 [ 1160.468185] loop2: rw=1, want=242, limit=16 [ 1160.475245] attempt to access beyond end of device [ 1160.479814] attempt to access beyond end of device [ 1160.486887] loop2: rw=1, want=243, limit=16 [ 1160.490973] loop4: rw=2049, want=251, limit=16 [ 1160.495660] attempt to access beyond end of device [ 1160.495909] attempt to access beyond end of device [ 1160.507852] loop2: rw=1, want=244, limit=16 [ 1160.514482] loop4: rw=2049, want=252, limit=16 [ 1160.519548] attempt to access beyond end of device [ 1160.521328] attempt to access beyond end of device [ 1160.524559] loop4: rw=2049, want=253, limit=16 [ 1160.538514] loop2: rw=1, want=245, limit=16 [ 1160.540558] attempt to access beyond end of device [ 1160.549150] loop4: rw=2049, want=254, limit=16 [ 1160.549286] attempt to access beyond end of device [ 1160.553911] attempt to access beyond end of device [ 1160.571843] loop4: rw=2049, want=255, limit=16 [ 1160.571914] loop2: rw=1, want=246, limit=16 [ 1160.580317] attempt to access beyond end of device [ 1160.582077] attempt to access beyond end of device [ 1160.585845] loop4: rw=2049, want=256, limit=16 [ 1160.594713] loop2: rw=1, want=248, limit=16 [ 1160.599984] attempt to access beyond end of device [ 1160.604911] loop2: rw=1, want=249, limit=16 [ 1160.609475] attempt to access beyond end of device [ 1160.615129] loop2: rw=1, want=250, limit=16 [ 1160.619582] attempt to access beyond end of device [ 1160.624511] loop2: rw=1, want=251, limit=16 [ 1160.629032] attempt to access beyond end of device [ 1160.633961] loop2: rw=1, want=252, limit=16 [ 1160.638403] attempt to access beyond end of device [ 1160.643322] loop2: rw=1, want=253, limit=16 [ 1160.647786] attempt to access beyond end of device [ 1160.652713] loop2: rw=1, want=254, limit=16 [ 1160.657155] attempt to access beyond end of device [ 1160.662176] loop2: rw=1, want=255, limit=16 [ 1160.670349] attempt to access beyond end of device [ 1160.678480] loop2: rw=1, want=256, limit=16 [ 1160.682912] attempt to access beyond end of device [ 1160.687937] loop2: rw=1, want=247, limit=16 [ 1160.704479] attempt to access beyond end of device [ 1160.709723] loop4: rw=1, want=121, limit=16 [ 1160.715292] attempt to access beyond end of device [ 1160.747676] loop4: rw=1, want=160, limit=16 [ 1160.752095] attempt to access beyond end of device [ 1160.779962] loop4: rw=1, want=161, limit=16 [ 1160.788003] buffer_io_error: 200 callbacks suppressed [ 1160.788013] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 1160.827729] attempt to access beyond end of device [ 1160.832716] loop4: rw=1, want=162, limit=16 [ 1160.860307] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 1160.880200] attempt to access beyond end of device [ 1160.885156] loop4: rw=1, want=163, limit=16 [ 1160.901110] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 1160.911057] attempt to access beyond end of device [ 1160.911644] attempt to access beyond end of device [ 1160.920568] loop4: rw=1, want=164, limit=16 [ 1160.930529] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 1160.936095] loop2: rw=2049, want=56, limit=16 [ 1160.944028] attempt to access beyond end of device [ 1160.949821] attempt to access beyond end of device [ 1160.949833] loop4: rw=1, want=167, limit=16 [ 1160.949847] Buffer I/O error on dev loop4, logical block 166, lost async page write [ 1160.949874] attempt to access beyond end of device [ 1160.949884] loop4: rw=1, want=168, limit=16 [ 1160.949894] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 1160.949923] attempt to access beyond end of device [ 1160.949931] loop4: rw=1, want=169, limit=16 [ 1160.949941] Buffer I/O error on dev loop4, logical block 168, lost async page write [ 1160.949968] attempt to access beyond end of device [ 1160.949978] loop4: rw=1, want=170, limit=16 [ 1160.949987] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 1160.950148] attempt to access beyond end of device [ 1160.955216] loop2: rw=2049, want=57, limit=16 [ 1160.985276] loop4: rw=1, want=250, limit=16 [ 1160.990780] Buffer I/O error on dev loop2, logical block 56, lost async page write [ 1161.055819] attempt to access beyond end of device [ 1161.061025] loop2: rw=2049, want=58, limit=16 [ 1161.065767] Buffer I/O error on dev loop2, logical block 57, lost async page write [ 1161.085318] attempt to access beyond end of device [ 1161.091545] loop2: rw=2049, want=83, limit=16 [ 1161.098534] attempt to access beyond end of device [ 1161.103644] loop2: rw=2049, want=84, limit=16 [ 1161.110121] attempt to access beyond end of device [ 1161.115124] loop2: rw=2049, want=85, limit=16 [ 1161.121640] attempt to access beyond end of device [ 1161.132610] loop2: rw=2049, want=86, limit=16 [ 1161.137958] attempt to access beyond end of device [ 1161.142974] loop2: rw=2049, want=87, limit=16 [ 1161.150517] attempt to access beyond end of device [ 1161.155526] loop2: rw=2049, want=88, limit=16 [ 1161.161415] attempt to access beyond end of device [ 1161.166810] loop2: rw=2049, want=121, limit=16 [ 1161.171842] attempt to access beyond end of device [ 1161.177531] loop2: rw=2049, want=122, limit=16 [ 1161.182530] attempt to access beyond end of device [ 1161.188583] loop2: rw=2049, want=123, limit=16 [ 1161.193390] attempt to access beyond end of device [ 1161.199926] loop2: rw=2049, want=124, limit=16 [ 1161.204842] attempt to access beyond end of device [ 1161.210339] loop2: rw=2049, want=125, limit=16 [ 1161.215281] attempt to access beyond end of device [ 1161.220694] loop2: rw=2049, want=126, limit=16 [ 1161.234967] attempt to access beyond end of device [ 1161.240555] loop2: rw=2049, want=127, limit=16 [ 1161.245428] attempt to access beyond end of device [ 1161.250566] loop2: rw=2049, want=152, limit=16 [ 1161.255587] attempt to access beyond end of device [ 1161.260893] loop2: rw=2049, want=180, limit=16 [ 1161.265787] attempt to access beyond end of device [ 1161.271343] loop2: rw=2049, want=181, limit=16 [ 1161.276899] attempt to access beyond end of device [ 1161.281899] loop2: rw=2049, want=182, limit=16 [ 1161.287297] attempt to access beyond end of device [ 1161.292269] loop2: rw=2049, want=183, limit=16 [ 1161.297757] attempt to access beyond end of device [ 1161.302863] loop2: rw=2049, want=184, limit=16 [ 1161.308924] attempt to access beyond end of device [ 1161.314003] loop2: rw=2049, want=185, limit=16 [ 1161.320192] attempt to access beyond end of device [ 1161.325213] loop2: rw=2049, want=215, limit=16 [ 1161.334297] attempt to access beyond end of device [ 1161.339541] loop2: rw=2049, want=216, limit=16 [ 1161.344494] attempt to access beyond end of device [ 1161.349822] loop2: rw=2049, want=217, limit=16 [ 1161.354665] attempt to access beyond end of device [ 1161.359809] loop2: rw=2049, want=218, limit=16 [ 1161.364803] attempt to access beyond end of device [ 1161.370070] loop2: rw=2049, want=219, limit=16 [ 1161.374913] attempt to access beyond end of device [ 1161.380440] loop2: rw=2049, want=220, limit=16 [ 1161.385292] attempt to access beyond end of device [ 1161.390568] loop2: rw=2049, want=221, limit=16 [ 1161.395539] attempt to access beyond end of device [ 1161.402104] loop2: rw=2049, want=222, limit=16 [ 1161.407786] attempt to access beyond end of device [ 1161.412768] loop2: rw=2049, want=243, limit=16 [ 1161.417934] attempt to access beyond end of device [ 1161.422967] loop2: rw=2049, want=244, limit=16 10:40:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:40:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:40:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x10, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:40:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1b, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 10:40:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000001) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x0, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xc, r5, 0x8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 10:40:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(0x0, 0x80802, 0x3f7d3b40454daeb5) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0xff, 0x20000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf070a648, 0x2, @perf_config_ext={0x100000000}, 0x2220, 0x8000, 0x5, 0x4, 0x1000, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, r2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1161.504063] attempt to access beyond end of device [ 1161.518030] loop2: rw=1, want=82, limit=16 [ 1161.536395] attempt to access beyond end of device [ 1161.556823] loop2: rw=1, want=120, limit=16 [ 1161.567925] attempt to access beyond end of device [ 1161.592681] loop2: rw=1, want=151, limit=16 [ 1161.597878] attempt to access beyond end of device [ 1161.602876] loop2: rw=1, want=176, limit=16 [ 1161.608301] attempt to access beyond end of device [ 1161.617032] FAT-fs (loop5): bogus number of reserved sectors 10:40:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(0x0, 0x80802, 0x3f7d3b40454daeb5) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1c, 0x0, r1, &(0x7f0000000000), 0x16006, 0x700}]) socket$packet(0x11, 0x3, 0x300) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000500), 0xb}, 0x3a76f3205d939d7d, 0x7, 0x40032b4, 0x0, 0x0, 0x0, 0x4161, 0x0, 0x0, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r4, 0xc, r3, 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x9, 0x100, 0x0, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1, 0x2d3}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 1161.672224] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1161.681928] loop2: rw=1, want=177, limit=16 [ 1161.736797] attempt to access beyond end of device [ 1161.810499] loop2: rw=1, want=178, limit=16 [ 1161.854937] attempt to access beyond end of device [ 1161.863403] attempt to access beyond end of device [ 1161.864552] attempt to access beyond end of device 10:40:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x40a480, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x16, 0x0, r0, &(0x7f0000000000), 0x16006, 0x700}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xc}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x0, 0x80, 0x8, 0x80, 0x0, 0x48, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0xb}, 0x0, 0x0, 0x40032b4, 0x0, 0x0, 0x7f, 0x4161, 0x0, 0x1ff, 0x0, 0x5f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000300)={0x7fff, 0x8, 0x0, 0x100, 0x23, "d4f7f5b3d5ec370ef162a00820b4ac491b3212", 0x1d1}) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 1161.895175] loop2: rw=1, want=179, limit=16 [ 1161.901046] loop0: rw=2049, want=40, limit=16 [ 1161.924451] loop4: rw=2049, want=97, limit=16 [ 1161.945628] attempt to access beyond end of device [ 1161.956929] attempt to access beyond end of device [ 1161.978961] attempt to access beyond end of device [ 1162.003395] loop2: rw=1, want=186, limit=16 [ 1162.009656] loop0: rw=2049, want=41, limit=16 [ 1162.031716] ================================================================== [ 1162.031945] loop4: rw=2049, want=98, limit=16 [ 1162.039400] BUG: KASAN: use-after-free in dev_queue_xmit_nit+0x87e/0xa20 [ 1162.039419] Read of size 8 at addr ffff888097f9b330 by task syz-executor.1/12026 [ 1162.039422] [ 1162.039441] CPU: 1 PID: 12026 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1162.039447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1162.039451] Call Trace: [ 1162.039457] [ 1162.039472] dump_stack+0x1fc/0x2ef [ 1162.039503] print_address_description.cold+0x54/0x219 [ 1162.039520] kasan_report_error.cold+0x8a/0x1b9 [ 1162.039535] ? dev_queue_xmit_nit+0x87e/0xa20 [ 1162.039549] __asan_report_load8_noabort+0x88/0x90 [ 1162.039565] ? dev_queue_xmit_nit+0x87e/0xa20 [ 1162.039579] dev_queue_xmit_nit+0x87e/0xa20 [ 1162.039606] dev_hard_start_xmit+0xaa/0x920 [ 1162.039647] sch_direct_xmit+0x2d6/0xf70 [ 1162.039664] ? rcu_nmi_exit+0xb3/0x180 [ 1162.039681] ? qdisc_destroy+0x790/0x790 [ 1162.075486] attempt to access beyond end of device [ 1162.077373] ? check_preemption_disabled+0x41/0x280 [ 1162.077389] ? check_preemption_disabled+0x10/0x280 [ 1162.077414] __qdisc_run+0x4d0/0x1640 [ 1162.083958] attempt to access beyond end of device [ 1162.085737] __dev_queue_xmit+0x2102/0x2e00 [ 1162.085800] ? ip_finish_output2+0xb6d/0x15a0 [ 1162.085818] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1162.095078] loop2: rw=1, want=187, limit=16 [ 1162.095726] ? netdev_pick_tx+0x2f0/0x2f0 [ 1162.115035] attempt to access beyond end of device [ 1162.118191] ? rcu_nmi_exit+0xb3/0x180 [ 1162.118213] ? ip_finish_output2+0xa79/0x15a0 [ 1162.118229] ? check_memory_region+0xc8/0x170 [ 1162.118242] ? ip_finish_output2+0xfe5/0x15a0 [ 1162.118257] ip_finish_output2+0xb6d/0x15a0 [ 1162.118273] ? ip_send_check+0xb0/0xb0 [ 1162.118287] ? check_preemption_disabled+0x41/0x280 [ 1162.118304] ip_finish_output+0xae9/0x10b0 [ 1162.118319] ip_output+0x203/0x5f0 [ 1162.118333] ? ip_mc_output+0xec0/0xec0 [ 1162.128131] loop0: rw=2049, want=42, limit=16 [ 1162.130389] ? ip_fragment.constprop.0+0x240/0x240 [ 1162.130409] ip_local_out+0xaf/0x170 [ 1162.130424] __ip_queue_xmit+0x91e/0x1c10 [ 1162.130468] ? __tcp_transmit_skb+0x19a4/0x3400 [ 1162.143727] attempt to access beyond end of device [ 1162.145361] ? __tcp_transmit_skb+0x1dec/0x3400 [ 1162.145377] __tcp_transmit_skb+0x1b9c/0x3400 [ 1162.145399] ? __tcp_select_window+0x870/0x870 [ 1162.145412] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 1162.145435] ? memset+0x20/0x40 [ 1162.169877] loop2: rw=1, want=188, limit=16 [ 1162.171961] ? __alloc_skb+0x34f/0x560 [ 1162.171980] __tcp_send_ack.part.0+0x3d9/0x5c0 [ 1162.171995] tcp_send_ack+0x7d/0xa0 [ 1162.172012] __tcp_ack_snd_check+0x152/0x890 [ 1162.177910] attempt to access beyond end of device [ 1162.181053] tcp_rcv_established+0x18f9/0x1ef0 [ 1162.181073] ? tcp_data_queue+0x4730/0x4730 [ 1162.181088] ? tcp_v4_do_rcv+0x53/0x870 [ 1162.181103] tcp_v4_do_rcv+0x5d6/0x870 [ 1162.181118] tcp_v4_rcv+0x2c03/0x3b80 [ 1162.195992] loop4: rw=2049, want=99, limit=16 [ 1162.198445] ? tcp_v4_early_demux+0x8e0/0x8e0 [ 1162.198462] ? check_preemption_disabled+0x41/0x280 [ 1162.198544] ip_local_deliver_finish+0x495/0xc00 [ 1162.209768] loop0: rw=2049, want=43, limit=16 [ 1162.211671] ip_local_deliver+0x188/0x500 [ 1162.211688] ? ip_call_ra_chain+0x5d0/0x5d0 [ 1162.211706] ? inet_del_offload+0x50/0x50 [ 1162.211726] ip_rcv_finish+0x1ca/0x2e0 [ 1162.211739] ip_rcv+0xca/0x3c0 [ 1162.211755] ? ip_local_deliver+0x500/0x500 [ 1162.211767] ? mark_held_locks+0xf0/0xf0 [ 1162.211785] ? ip_sublist_rcv+0xc10/0xc10 [ 1162.211800] ? netif_receive_skb_internal+0x1da/0x3f0 [ 1162.211817] ? ip_local_deliver+0x500/0x500 [ 1162.219163] attempt to access beyond end of device [ 1162.219595] __netif_receive_skb_one_core+0x114/0x180 [ 1162.219611] ? __netif_receive_skb_core+0x3270/0x3270 [ 1162.224897] attempt to access beyond end of device [ 1162.228041] ? mark_held_locks+0xa6/0xf0 [ 1162.228056] ? lock_acquire+0x170/0x3c0 [ 1162.228068] ? netif_receive_skb_internal+0x6e/0x3f0 [ 1162.228083] __netif_receive_skb+0x27/0x1c0 [ 1162.228098] netif_receive_skb_internal+0xf0/0x3f0 [ 1162.228111] ? __netif_receive_skb+0x1c0/0x1c0 [ 1162.228125] ? check_preemption_disabled+0x41/0x280 [ 1162.228141] ? skb_gro_reset_offset+0x170/0x300 [ 1162.228154] napi_gro_receive+0x2e6/0x450 [ 1162.228243] receive_buf+0xc2c/0x6780 [ 1162.228266] ? virtnet_xdp_xmit+0x880/0x880 [ 1162.243526] loop2: rw=1, want=189, limit=16 [ 1162.245831] ? virtio_finalize_features+0x30/0x230 [ 1162.245850] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 1162.256803] loop4: rw=2049, want=100, limit=16 [ 1162.259962] ? detach_buf+0x487/0x5d0 [ 1162.259982] ? virtqueue_get_buf_ctx+0x419/0x710 [ 1162.271877] attempt to access beyond end of device [ 1162.273078] virtnet_poll+0x568/0xe00 [ 1162.273094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1162.273112] ? receive_buf+0x6780/0x6780 [ 1162.273130] ? retint_kernel+0x2d/0x2d [ 1162.273148] ? net_rx_action+0x47f/0xfb0 [ 1162.282650] attempt to access beyond end of device [ 1162.285891] ? net_rx_action+0x48d/0xfb0 [ 1162.285908] net_rx_action+0x4ac/0xfb0 [ 1162.285934] ? napi_complete_done+0x570/0x570 [ 1162.285949] ? check_preemption_disabled+0x41/0x280 [ 1162.285968] __do_softirq+0x265/0x980 [ 1162.285990] irq_exit+0x215/0x260 [ 1162.286001] do_IRQ+0x10c/0x1c0 [ 1162.286017] common_interrupt+0xf/0xf [ 1162.286023] [ 1162.286036] RIP: 0010:_raw_spin_unlock_irq+0x50/0x80 [ 1162.286049] Code: c0 98 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 01 31 d8 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 26 1b 28 f9 65 8b 05 9f 8d e8 77 85 c0 74 02 5d [ 1162.286055] RSP: 0018:ffff8880547c73e0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd5 [ 1162.286067] RAX: 1ffffffff13e3053 RBX: ffff88809fc80040 RCX: 1ffff11013f90122 [ 1162.286075] RDX: dffffc0000000000 RSI: ffff88809fc80918 RDI: ffff88809fc808c4 [ 1162.286082] RBP: ffff8880ba12b0c0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.286089] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ba12b0c0 [ 1162.286096] R13: ffff8880ab8ce5c0 R14: 0000000000000000 R15: 0000000000000001 [ 1162.286178] finish_task_switch+0x146/0x760 [ 1162.286189] ? finish_task_switch+0x118/0x760 [ 1162.286224] ? switch_mm_irqs_off+0x764/0x1340 [ 1162.286238] __schedule+0x88f/0x2040 [ 1162.286252] ? rcu_nmi_exit+0xb3/0x180 [ 1162.286269] ? io_schedule_timeout+0x140/0x140 [ 1162.286289] preempt_schedule_irq+0xb0/0x140 [ 1162.286304] retint_kernel+0x1b/0x2d [ 1162.312035] loop4: rw=2049, want=101, limit=16 [ 1162.315936] RIP: 0010:__rcu_read_unlock+0x150/0x160 [ 1162.315950] Code: 89 ef e8 93 f7 46 00 e9 3f ff ff ff 48 89 ef e8 56 fa 46 00 e9 67 ff ff ff e8 7c f7 46 00 eb 97 48 89 ef e8 42 fa 46 00 eb b4 <48> 89 df e8 e8 ee ff ff eb 8d 66 0f 1f 44 00 00 41 57 48 8d b7 c8 [ 1162.315957] RSP: 0018:ffff8880547c75f0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 1162.315969] RAX: 0000000000000001 RBX: ffff88809fc80040 RCX: ffffc90007852000 [ 1162.315977] RDX: 0000000000000000 RSI: ffffffff81d86cc1 RDI: ffff88809fc803b4 [ 1162.315984] RBP: ffff88809fc803b0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.315992] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880ae2b4a80 [ 1162.315998] R13: 0000000000000000 R14: ffff88823513cb40 R15: 0000000000000000 [ 1162.316076] ? ext4_get_group_desc+0x1d1/0x4e0 [ 1162.316095] ext4_get_group_desc+0x1d6/0x4e0 [ 1162.316112] find_inode_bit+0x1a0/0x520 [ 1162.316132] __ext4_new_inode+0x160c/0x5a20 [ 1162.316149] ? _raw_spin_unlock_irqrestore+0xa3/0xe0 [ 1162.316173] ? ext4_free_inode+0x1780/0x1780 [ 1162.316196] ? __dquot_initialize+0x298/0xb70 [ 1162.316210] ? lock_downgrade+0x720/0x720 [ 1162.316230] ? dquot_initialize_needed+0x290/0x290 [ 1162.316243] ? _raw_spin_unlock+0x29/0x40 [ 1162.316264] ext4_create+0x29e/0x5f0 [ 1162.316283] ? ext4_add_entry+0xbb0/0xbb0 [ 1162.316295] ? generic_permission+0x116/0x4d0 [ 1162.316311] ? inode_permission.part.0+0x10c/0x450 [ 1162.320690] loop0: rw=2049, want=120, limit=16 [ 1162.324571] ? ext4_add_entry+0xbb0/0xbb0 [ 1162.324586] lookup_open+0x893/0x1a20 [ 1162.324607] ? vfs_mkdir+0x7a0/0x7a0 [ 1162.324619] ? unlazy_walk+0x1a4/0x540 [ 1162.324642] ? check_preemption_disabled+0x41/0x280 [ 1162.324670] path_openat+0x1094/0x2df0 [ 1162.324694] ? path_lookupat+0x8d0/0x8d0 [ 1162.331225] attempt to access beyond end of device [ 1162.334173] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1162.334188] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1162.334201] ? mark_held_locks+0xf0/0xf0 [ 1162.334213] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1162.334233] do_filp_open+0x18c/0x3f0 [ 1162.334245] ? may_open_dev+0xf0/0xf0 [ 1162.334265] ? lock_downgrade+0x720/0x720 [ 1162.334280] ? lock_acquire+0x170/0x3c0 [ 1162.350970] attempt to access beyond end of device [ 1162.351939] ? __alloc_fd+0x34/0x570 [ 1162.351956] ? do_raw_spin_unlock+0x171/0x230 [ 1162.351971] ? _raw_spin_unlock+0x29/0x40 [ 1162.351982] ? __alloc_fd+0x28d/0x570 [ 1162.352002] do_sys_open+0x3b3/0x520 [ 1162.352017] ? filp_open+0x70/0x70 [ 1162.352033] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1162.352048] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1162.352061] ? do_syscall_64+0x21/0x620 [ 1162.352076] do_syscall_64+0xf9/0x620 [ 1162.352091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1162.352102] RIP: 0033:0x7f7032bb9209 [ 1162.352115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1162.352121] RSP: 002b:00007f703152e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1162.352134] RAX: ffffffffffffffda RBX: 00007f7032ccbf60 RCX: 00007f7032bb9209 [ 1162.352142] RDX: 000000000000275a RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 1162.352149] RBP: 00007f7032c13161 R08: 0000000000000000 R09: 0000000000000000 [ 1162.352155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.352163] R13: 00007ffcd10b36ff R14: 00007f703152e300 R15: 0000000000022000 [ 1162.352180] [ 1162.352185] Allocated by task 12025: [ 1162.352198] __kmalloc+0x15a/0x3c0 [ 1162.352209] sk_prot_alloc+0x1e2/0x2d0 [ 1162.352218] sk_alloc+0x36/0xec0 [ 1162.352313] packet_create+0x117/0x850 [ 1162.352344] __sock_create+0x3d8/0x740 [ 1162.352354] __sys_socket+0xef/0x200 [ 1162.352363] __x64_sys_socket+0x6f/0xb0 [ 1162.352372] do_syscall_64+0xf9/0x620 [ 1162.352384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1162.352388] [ 1162.352393] Freed by task 12019: [ 1162.352403] kfree+0xcc/0x210 [ 1162.352413] __sk_destruct+0x684/0x8a0 [ 1162.352423] __sk_free+0x165/0x3b0 [ 1162.352433] sk_free+0x3b/0x50 [ 1162.352443] packet_release+0x890/0xb70 [ 1162.352454] __sock_release+0xcd/0x2a0 [ 1162.352466] sock_close+0x15/0x20 [ 1162.352477] __fput+0x2ce/0x890 [ 1162.352532] task_work_run+0x148/0x1c0 [ 1162.352543] exit_to_usermode_loop+0x251/0x2a0 [ 1162.352553] do_syscall_64+0x538/0x620 [ 1162.352565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1162.352568] [ 1162.352577] The buggy address belongs to the object at ffff888097f9ab00 [ 1162.352577] which belongs to the cache kmalloc-4096 of size 4096 [ 1162.352587] The buggy address is located 2096 bytes inside of [ 1162.352587] 4096-byte region [ffff888097f9ab00, ffff888097f9bb00) [ 1162.352591] The buggy address belongs to the page: [ 1162.352601] page:ffffea00025fe680 count:1 mapcount:0 mapping:ffff88813bff0dc0 index:0x0 compound_mapcount: 0 [ 1162.352613] flags: 0xfff00000008100(slab|head) [ 1162.352630] raw: 00fff00000008100 ffffea0002a6f388 ffffea000235df88 ffff88813bff0dc0 [ 1162.352643] raw: 0000000000000000 ffff888097f9ab00 0000000100000001 0000000000000000 [ 1162.352648] page dumped because: kasan: bad access detected [ 1162.352651] [ 1162.352655] Memory state around the buggy address: [ 1162.352664] ffff888097f9b200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.352673] ffff888097f9b280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.352682] >ffff888097f9b300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.352687] ^ [ 1162.352696] ffff888097f9b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.352705] ffff888097f9b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.352710] ================================================================== [ 1162.352714] Disabling lock debugging due to kernel taint [ 1162.352779] Kernel panic - not syncing: panic_on_warn set ... [ 1162.352779] [ 1162.352793] CPU: 1 PID: 12026 Comm: syz-executor.1 Tainted: G B 4.19.211-syzkaller #0 [ 1162.352800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1162.352803] Call Trace: [ 1162.352808] [ 1162.352820] dump_stack+0x1fc/0x2ef [ 1162.352843] panic+0x26a/0x50e [ 1162.352854] ? __warn_printk+0xf3/0xf3 [ 1162.352865] ? retint_kernel+0x2d/0x2d [ 1162.352882] ? trace_hardirqs_on+0x55/0x210 [ 1162.352897] kasan_end_report+0x43/0x49 [ 1162.352916] kasan_report_error.cold+0xa7/0x1b9 [ 1162.352930] ? dev_queue_xmit_nit+0x87e/0xa20 [ 1162.352943] __asan_report_load8_noabort+0x88/0x90 [ 1162.352957] ? dev_queue_xmit_nit+0x87e/0xa20 [ 1162.352970] dev_queue_xmit_nit+0x87e/0xa20 [ 1162.352985] dev_hard_start_xmit+0xaa/0x920 [ 1162.353002] sch_direct_xmit+0x2d6/0xf70 [ 1162.353016] ? rcu_nmi_exit+0xb3/0x180 [ 1162.353028] ? qdisc_destroy+0x790/0x790 [ 1162.353042] ? check_preemption_disabled+0x41/0x280 [ 1162.353055] ? check_preemption_disabled+0x10/0x280 [ 1162.353071] __qdisc_run+0x4d0/0x1640 [ 1162.353087] __dev_queue_xmit+0x2102/0x2e00 [ 1162.353098] ? ip_finish_output2+0xb6d/0x15a0 [ 1162.353111] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1162.353123] ? netdev_pick_tx+0x2f0/0x2f0 [ 1162.353133] ? rcu_nmi_exit+0xb3/0x180 [ 1162.353147] ? ip_finish_output2+0xa79/0x15a0 [ 1162.353160] ? check_memory_region+0xc8/0x170 [ 1162.353170] ? ip_finish_output2+0xfe5/0x15a0 [ 1162.353182] ip_finish_output2+0xb6d/0x15a0 [ 1162.353194] ? ip_send_check+0xb0/0xb0 [ 1162.353207] ? check_preemption_disabled+0x41/0x280 [ 1162.353220] ip_finish_output+0xae9/0x10b0 [ 1162.353232] ip_output+0x203/0x5f0 [ 1162.353243] ? ip_mc_output+0xec0/0xec0 [ 1162.353255] ? ip_fragment.constprop.0+0x240/0x240 [ 1162.353268] ip_local_out+0xaf/0x170 [ 1162.353281] __ip_queue_xmit+0x91e/0x1c10 [ 1162.353292] ? __tcp_transmit_skb+0x19a4/0x3400 [ 1162.353302] ? __tcp_transmit_skb+0x1dec/0x3400 [ 1162.353313] __tcp_transmit_skb+0x1b9c/0x3400 [ 1162.353328] ? __tcp_select_window+0x870/0x870 [ 1162.353339] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 1162.353353] ? memset+0x20/0x40 [ 1162.353369] ? __alloc_skb+0x34f/0x560 [ 1162.353381] __tcp_send_ack.part.0+0x3d9/0x5c0 [ 1162.353393] tcp_send_ack+0x7d/0xa0 [ 1162.353406] __tcp_ack_snd_check+0x152/0x890 [ 1162.353420] tcp_rcv_established+0x18f9/0x1ef0 [ 1162.353435] ? tcp_data_queue+0x4730/0x4730 [ 1162.353448] ? tcp_v4_do_rcv+0x53/0x870 [ 1162.353460] tcp_v4_do_rcv+0x5d6/0x870 [ 1162.353472] tcp_v4_rcv+0x2c03/0x3b80 [ 1162.353491] ? tcp_v4_early_demux+0x8e0/0x8e0 [ 1162.353503] ? check_preemption_disabled+0x41/0x280 [ 1162.353520] ip_local_deliver_finish+0x495/0xc00 [ 1162.353535] ip_local_deliver+0x188/0x500 [ 1162.353547] ? ip_call_ra_chain+0x5d0/0x5d0 [ 1162.353562] ? inet_del_offload+0x50/0x50 [ 1162.353577] ip_rcv_finish+0x1ca/0x2e0 [ 1162.353587] ip_rcv+0xca/0x3c0 [ 1162.353600] ? ip_local_deliver+0x500/0x500 [ 1162.353611] ? mark_held_locks+0xf0/0xf0 [ 1162.353625] ? ip_sublist_rcv+0xc10/0xc10 [ 1162.353637] ? netif_receive_skb_internal+0x1da/0x3f0 [ 1162.353650] ? ip_local_deliver+0x500/0x500 [ 1162.353662] __netif_receive_skb_one_core+0x114/0x180 [ 1162.353675] ? __netif_receive_skb_core+0x3270/0x3270 [ 1162.353686] ? mark_held_locks+0xa6/0xf0 [ 1162.353699] ? lock_acquire+0x170/0x3c0 [ 1162.353710] ? netif_receive_skb_internal+0x6e/0x3f0 [ 1162.353723] __netif_receive_skb+0x27/0x1c0 [ 1162.353735] netif_receive_skb_internal+0xf0/0x3f0 [ 1162.353747] ? __netif_receive_skb+0x1c0/0x1c0 [ 1162.353760] ? check_preemption_disabled+0x41/0x280 [ 1162.353774] ? skb_gro_reset_offset+0x170/0x300 [ 1162.353785] napi_gro_receive+0x2e6/0x450 [ 1162.353800] receive_buf+0xc2c/0x6780 [ 1162.353818] ? virtnet_xdp_xmit+0x880/0x880 [ 1162.353830] ? virtio_finalize_features+0x30/0x230 [ 1162.353844] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 1162.353855] ? detach_buf+0x487/0x5d0 [ 1162.353869] ? virtqueue_get_buf_ctx+0x419/0x710 [ 1162.353883] virtnet_poll+0x568/0xe00 [ 1162.353895] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1162.353917] ? receive_buf+0x6780/0x6780 [ 1162.353931] ? retint_kernel+0x2d/0x2d [ 1162.353944] ? net_rx_action+0x47f/0xfb0 [ 1162.353955] ? net_rx_action+0x48d/0xfb0 [ 1162.353967] net_rx_action+0x4ac/0xfb0 [ 1162.353982] ? napi_complete_done+0x570/0x570 [ 1162.353996] ? check_preemption_disabled+0x41/0x280 [ 1162.354010] __do_softirq+0x265/0x980 [ 1162.354025] irq_exit+0x215/0x260 [ 1162.354034] do_IRQ+0x10c/0x1c0 [ 1162.354047] common_interrupt+0xf/0xf [ 1162.354051] [ 1162.354063] RIP: 0010:_raw_spin_unlock_irq+0x50/0x80 [ 1162.354074] Code: c0 98 82 f1 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 01 31 d8 01 00 74 25 fb 66 0f 1f 44 00 00 01 00 00 00 e8 26 1b 28 f9 65 8b 05 9f 8d e8 77 85 c0 74 02 5d [ 1162.354080] RSP: 0018:ffff8880547c73e0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd5 [ 1162.354091] RAX: 1ffffffff13e3053 RBX: ffff88809fc80040 RCX: 1ffff11013f90122 [ 1162.354098] RDX: dffffc0000000000 RSI: ffff88809fc80918 RDI: ffff88809fc808c4 [ 1162.354104] RBP: ffff8880ba12b0c0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.354111] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ba12b0c0 [ 1162.354117] R13: ffff8880ab8ce5c0 R14: 0000000000000000 R15: 0000000000000001 [ 1162.354135] finish_task_switch+0x146/0x760 [ 1162.354145] ? finish_task_switch+0x118/0x760 [ 1162.354157] ? switch_mm_irqs_off+0x764/0x1340 [ 1162.354168] __schedule+0x88f/0x2040 [ 1162.354179] ? rcu_nmi_exit+0xb3/0x180 [ 1162.354192] ? io_schedule_timeout+0x140/0x140 [ 1162.354206] preempt_schedule_irq+0xb0/0x140 [ 1162.354219] retint_kernel+0x1b/0x2d [ 1162.354231] RIP: 0010:__rcu_read_unlock+0x150/0x160 [ 1162.354241] Code: 89 ef e8 93 f7 46 00 e9 3f ff ff ff 48 89 ef e8 56 fa 46 00 e9 67 ff ff ff e8 7c f7 46 00 eb 97 48 89 ef e8 42 fa 46 00 eb b4 <48> 89 df e8 e8 ee ff ff eb 8d 66 0f 1f 44 00 00 41 57 48 8d b7 c8 [ 1162.354247] RSP: 0018:ffff8880547c75f0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 1162.354256] RAX: 0000000000000001 RBX: ffff88809fc80040 RCX: ffffc90007852000 [ 1162.354263] RDX: 0000000000000000 RSI: ffffffff81d86cc1 RDI: ffff88809fc803b4 [ 1162.354269] RBP: ffff88809fc803b0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.354276] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880ae2b4a80 [ 1162.354283] R13: 0000000000000000 R14: ffff88823513cb40 R15: 0000000000000000 [ 1162.354300] ? ext4_get_group_desc+0x1d1/0x4e0 [ 1162.354314] ext4_get_group_desc+0x1d6/0x4e0 [ 1162.354327] find_inode_bit+0x1a0/0x520 [ 1162.354342] __ext4_new_inode+0x160c/0x5a20 [ 1162.354356] ? _raw_spin_unlock_irqrestore+0xa3/0xe0 [ 1162.354373] ? ext4_free_inode+0x1780/0x1780 [ 1162.354385] ? __dquot_initialize+0x298/0xb70 [ 1162.354397] ? lock_downgrade+0x720/0x720 [ 1162.354412] ? dquot_initialize_needed+0x290/0x290 [ 1162.354423] ? _raw_spin_unlock+0x29/0x40 [ 1162.354438] ext4_create+0x29e/0x5f0 [ 1162.354453] ? ext4_add_entry+0xbb0/0xbb0 [ 1162.354464] ? generic_permission+0x116/0x4d0 [ 1162.354478] ? inode_permission.part.0+0x10c/0x450 [ 1162.354489] ? ext4_add_entry+0xbb0/0xbb0 [ 1162.354501] lookup_open+0x893/0x1a20 [ 1162.354517] ? vfs_mkdir+0x7a0/0x7a0 [ 1162.354528] ? unlazy_walk+0x1a4/0x540 [ 1162.354544] ? check_preemption_disabled+0x41/0x280 [ 1162.354563] path_openat+0x1094/0x2df0 [ 1162.354580] ? path_lookupat+0x8d0/0x8d0 [ 1162.354591] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1162.354602] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1162.354614] ? mark_held_locks+0xf0/0xf0 [ 1162.354624] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1162.354638] do_filp_open+0x18c/0x3f0 [ 1162.354648] ? may_open_dev+0xf0/0xf0 [ 1162.354663] ? lock_downgrade+0x720/0x720 [ 1162.354675] ? lock_acquire+0x170/0x3c0 [ 1162.354684] ? __alloc_fd+0x34/0x570 [ 1162.354696] ? do_raw_spin_unlock+0x171/0x230 [ 1162.354708] ? _raw_spin_unlock+0x29/0x40 [ 1162.354718] ? __alloc_fd+0x28d/0x570 [ 1162.354731] do_sys_open+0x3b3/0x520 [ 1162.354742] ? filp_open+0x70/0x70 [ 1162.354756] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1162.354769] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1162.354779] ? do_syscall_64+0x21/0x620 [ 1162.354791] do_syscall_64+0xf9/0x620 [ 1162.354805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1162.354813] RIP: 0033:0x7f7032bb9209 [ 1162.354823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1162.354829] RSP: 002b:00007f703152e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1162.354839] RAX: ffffffffffffffda RBX: 00007f7032ccbf60 RCX: 00007f7032bb9209 [ 1162.354846] RDX: 000000000000275a RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 1162.354852] RBP: 00007f7032c13161 R08: 0000000000000000 R09: 0000000000000000 [ 1162.354858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.354865] R13: 00007ffcd10b36ff R14: 00007f703152e300 R15: 0000000000022000 [ 1162.354943] Kernel Offset: disabled [ 1164.029704] Rebooting in 86400 seconds..